ANS-C01 Question 165
Select 2Your organization has multiple VPCs in the same AWS Region that need to communicate with each other, and you want to minimize management overhead while maintaining the ability to scale the network. Additionally, you need to provide access to a third-party SaaS application hosted in another VPC in the same Region, but you do not want to expose your VPCs to the public internet. Which combination of services should you use to meet these requirements?
- A
Use AWS Transit Gateway to connect the VPCs within your organization.
- B
Use VPC Peering to connect the VPCs within your organization.
- C
Use AWS PrivateLink to establish a private connection to the SaaS application.
- D
Use an Internet Gateway to enable communication with the SaaS application.
- E
Use a NAT Gateway to facilitate communication between your VPCs and the SaaS application.
Show answer and explanation
Correct answers: A, C
Explanation
The combination of AWS Transit Gateway and AWS PrivateLink addresses the requirements effectively. AWS Transit Gateway allows scalable and simplified inter-VPC communication, while AWS PrivateLink enables secure, private access to the third-party SaaS application without exposing traffic to the public internet. VPC Peering, while functional, becomes difficult to manage at scale, and Internet Gateway or NAT Gateway are not applicable for this use case.
- A. Correct.
Using AWS Transit Gateway is the recommended solution for connecting multiple VPCs within the same Region. It simplifies management and allows for scalable inter-VPC communication.
- B. Incorrect.
VPC Peering can connect VPCs, but managing peering relationships becomes complex as the number of VPCs increases, making it less suitable for this scenario.
- C. Correct.
AWS PrivateLink is ideal for establishing a private connection to a third-party SaaS application without exposing traffic to the public internet.
- D. Incorrect.
An Internet Gateway facilitates public internet access, which is not required in this scenario since the goal is to keep communication private.
- E. Incorrect.
A NAT Gateway is used for providing internet access to resources in private subnets, which is not relevant for the scenario described.