ANS-C01 Question 151
Select 2You are designing a hybrid cloud architecture where you need to securely extend your on-premises network into AWS VPCs across multiple regions. You decide to use an overlay network to achieve this. Which combination of AWS services and/or features would be most appropriate to implement this solution?
- A
AWS Transit Gateway with AWS Direct Connect
- B
AWS PrivateLink for secure connectivity
- C
AWS VPN to establish encrypted tunnels
- D
AWS Cloud WAN for global network management
- E
AWS Virtual Private Gateway for routing between VPC and on-premises
Show answer and explanation
Correct answers: A, C
Explanation
To implement an overlay network for securely extending on-premises networks into AWS across multiple VPCs and regions, AWS Transit Gateway provides centralized connectivity management, and AWS VPN ensures encrypted communication for secure data transfer. While other options such as PrivateLink and Virtual Private Gateway have specific use cases, they do not adequately address the requirements of an overlay network architecture. AWS Cloud WAN is also not directly suited for this scenario.
- A. Correct.
AWS Transit Gateway with AWS Direct Connect is a suitable choice for creating an overlay network. Transit Gateway allows for central connectivity across multiple VPCs and Direct Connect provides a high-bandwidth, low-latency connection to on-premises networks.
- B. Incorrect.
AWS PrivateLink is used to privately connect VPCs to AWS services or applications hosted on AWS without exposing traffic to the public internet. However, it is not designed for creating an overlay network between on-premises and multiple VPCs.
- C. Correct.
AWS VPN is a critical component for securely extending on-premises networks into AWS using encrypted tunnels. This is a foundational technology for overlay networks.
- D. Incorrect.
AWS Cloud WAN is a newer service designed for global network management, but it is not directly tied to creating encrypted overlay tunnels between on-premises and AWS VPCs.
- E. Incorrect.
AWS Virtual Private Gateway is used for routing between a single on-premises network and a VPC, but it lacks the ability to scale across multiple VPCs or regions, which is a key requirement for overlay networks.