ANS-C01 Question 133
Single answerYou are designing a hybrid cloud architecture that requires secure and low-latency connectivity between your on-premises data center and your VPC in AWS. The on-premises data center must access AWS services such as Amazon S3 and DynamoDB directly, without traversing the public internet. Which solution would best meet these requirements?
- A
Use an AWS Direct Connect connection with a private virtual interface (VIF) and a Direct Connect gateway.
- B
Establish a VPN connection over the internet and enable VPC endpoints for Amazon S3 and DynamoDB.
- C
Configure AWS Transit Gateway and establish a VPN connection through it.
- D
Use an AWS Direct Connect connection with a public virtual interface (VIF) and a Direct Connect gateway.
Show answer and explanation
Correct answer: A
Explanation
The scenario requires secure and low-latency connectivity between the on-premises data center and the VPC while also ensuring private access to AWS services such as Amazon S3 and DynamoDB. AWS Direct Connect with a private VIF provides direct, private connectivity to VPC resources, and the Direct Connect gateway allows access to multiple VPCs and AWS services without traversing the public internet. This makes it the ideal solution for the requirements.
- A. Correct.
This is the correct solution as AWS Direct Connect with a private VIF allows for secure, low-latency connectivity between your on-premises data center and your VPC. A Direct Connect gateway enables access to multiple VPCs and AWS services without traversing the public internet.
- B. Incorrect.
While VPN enables secure connectivity, it operates over the internet and does not provide the low-latency connection required in the scenario. VPC endpoints allow private connectivity to services, but they cannot replace the need for dedicated connectivity like Direct Connect.
- C. Incorrect.
AWS Transit Gateway simplifies connecting multiple VPCs and on-premises networks, but using it with a VPN would still rely on the internet and would not offer the low-latency connectivity required in this scenario.
- D. Incorrect.
AWS Direct Connect with a public VIF allows access to public AWS services, but it does not provide private connectivity to your VPC, which is required in this scenario.