ANS-C01 Question 162
Single answerYour organization runs a multi-region application hosted in AWS. The application uses Amazon VPCs in each region, and the VPCs in different regions need to communicate securely and with low latency. The organization also wants to minimize administrative overhead and ensure scalability for future regions as the application grows. What is the best approach to achieve this?
- A
Set up VPC peering connections between all VPCs in different regions.
- B
Use AWS Transit Gateway with inter-region peering enabled to connect the VPCs.
- C
Deploy a VPN connection between each pair of VPCs in different regions.
- D
Use a Direct Connect connection between the regions and route traffic through on-premises.
- E
Set up an Application Load Balancer to route traffic between regions.
Show answer and explanation
Correct answer: B
Explanation
AWS Transit Gateway with inter-region peering enabled is the most efficient and scalable solution for connecting multiple VPCs across regions. It simplifies network management, supports high bandwidth, and ensures low-latency communication without the need for complex mesh architectures or reliance on external infrastructure.
- A. Incorrect.
VPC peering can connect VPCs across regions, but it becomes complex and hard to manage as the number of VPCs increases due to the need for a full mesh of peering connections.
- B. Correct.
AWS Transit Gateway with inter-region peering is the best option as it allows scalable, secure, and low-latency communication between VPCs across regions. It simplifies management and reduces the administrative overhead of managing multiple connections.
- C. Incorrect.
VPN connections between VPCs are not ideal due to higher latency and lower bandwidth compared to AWS-native solutions. Additionally, managing multiple VPN connections increases operational complexity.
- D. Incorrect.
Direct Connect connections are typically used to connect on-premises environments to AWS. Using them to route traffic between regions adds unnecessary cost and complexity.
- E. Incorrect.
Application Load Balancers are designed for distributing traffic within or across VPCs, but they are not suitable for establishing network connectivity between VPCs in different regions.