ANS-C01 Question 103
Single answerYour organization needs to securely connect multiple VPCs across different AWS regions to support a global application. The architecture must ensure low latency, high availability, and scalability while minimizing operational overhead. Which solution would best meet these requirements?
- A
Use VPC peering to connect all VPCs across regions.
- B
Set up a fully-meshed VPN connection between all VPCs.
- C
Implement AWS Transit Gateway with inter-region peering attachments.
- D
Deploy an EC2 instance in each VPC to function as a proxy for routing traffic.
Show answer and explanation
Correct answer: C
Explanation
The AWS Transit Gateway with inter-region peering attachments is the best choice for connecting multiple VPCs across regions in a global application. It provides a scalable, highly available, and low-latency solution with centralized routing management. Alternatives like VPC peering, fully-meshed VPNs, or proxy EC2 instances either lack scalability or introduce complexity and performance issues.
- A. Incorrect.
VPC peering can connect VPCs, but it does not scale well for multiple VPCs across regions due to the need for a fully-meshed architecture and lack of centralized management.
- B. Incorrect.
A fully-meshed VPN connection between VPCs is complex to manage, introduces significant operational overhead, and may not provide the low latency or scalability required.
- C. Correct.
AWS Transit Gateway with inter-region peering attachments provides a scalable, highly available solution for securely connecting multiple VPCs across regions. It simplifies network management and offers low-latency connections.
- D. Incorrect.
Using EC2 instances as proxies for routing traffic is not a scalable or recommended solution due to increased management complexity, potential single points of failure, and performance bottlenecks.