ANS-C01 Question 166
Single answerYour company has multiple VPCs across different AWS regions. One VPC in the us-east-1 region hosts a critical database service that must be securely accessed by application servers in another VPC located in the eu-west-1 region. The application servers also need to communicate with other VPCs in the us-east-1 region. Which connectivity option provides the most scalable and cost-effective solution for this use case?
- A
Establish VPC peering connections between all the VPCs.
- B
Use an AWS Transit Gateway to connect all the VPCs.
- C
Set up AWS PrivateLink to expose the database service to the application servers.
- D
Use a VPN connection between the VPCs in us-east-1 and eu-west-1.
Show answer and explanation
Correct answer: B
Explanation
AWS Transit Gateway is the best option for connecting multiple VPCs, especially in scenarios involving inter-region connectivity. It provides a centralized approach to manage and route traffic between VPCs, supports inter-region peering, and scales well as more VPCs are added. In contrast, VPC peering becomes complex and unmanageable with a large number of VPCs, AWS PrivateLink is more suited for exposing specific services rather than general VPC connectivity, and VPN connections are less efficient for this use case.
- A. Incorrect.
Establishing VPC peering connections between all the VPCs is not scalable as it requires setting up and maintaining multiple peering connections, especially in a multi-region scenario.
- B. Correct.
Using an AWS Transit Gateway is the most scalable and cost-effective solution for connecting multiple VPCs across regions. It simplifies management by providing a central hub for routing traffic between VPCs and supports inter-region peering.
- C. Incorrect.
AWS PrivateLink is designed to expose specific services privately within or across VPCs but is not ideal for general connectivity between VPCs in this scenario, especially for inter-region communication.
- D. Incorrect.
Using a VPN connection between the VPCs in us-east-1 and eu-west-1 is not cost-effective or scalable for this use case as it involves additional setup and maintenance, and it does not address connectivity with other VPCs in us-east-1.