ANS-C01 Question 157
Single answerYour organization operates a multi-account AWS environment with several VPCs in different AWS Regions. You need to design a routing strategy that allows seamless connectivity between VPCs across accounts and Regions while minimizing the number of connections required and ensuring high performance. What is the most effective solution?
- A
Use VPC Peering for interconnecting all VPCs across accounts and Regions.
- B
Configure a Transit Gateway in each Region and interconnect them using Transit Gateway peering.
- C
Establish a Direct Connect connection for each VPC and route traffic through an on-premises data center.
- D
Use AWS PrivateLink to create point-to-point connectivity between VPCs across accounts and Regions.
Show answer and explanation
Correct answer: B
Explanation
The use of Transit Gateways in each Region, interconnected via Transit Gateway peering, is the most effective routing strategy for multi-account, multi-Region connectivity. This approach leverages the scalability and centralized routing capabilities of Transit Gateways, avoiding the complexity and limitations of VPC Peering or AWS PrivateLink. It also avoids the cost and inefficiency of routing traffic through an on-premises data center via Direct Connect.
- A. Incorrect.
VPC Peering is not scalable for this scenario since it requires a direct peering connection between each pair of VPCs, which leads to exponential growth in the number of connections as the number of VPCs increases.
- B. Correct.
Using Transit Gateways in each Region and connecting them via Transit Gateway peering is the most efficient solution. It provides a hub-and-spoke architecture, reduces complexity, and supports multi-account and multi-Region connectivity.
- C. Incorrect.
Using Direct Connect for each VPC is impractical and costly. It also creates unnecessary dependency on an on-premises data center for inter-VPC traffic.
- D. Incorrect.
AWS PrivateLink is designed for service-specific, point-to-point communication and is not suitable for connecting multiple VPCs in a scalable manner.