ANS-C01 Question 235
Single answerAn organization has multiple AWS accounts and wants to establish secure connectivity between VPCs across these accounts and Regions with minimal operational overhead. They also need to ensure that the connectivity scales well as new VPCs are added in the future. Which solution is the most suitable for this requirement?
- A
Use AWS Transit Gateway to connect all VPCs across accounts and Regions, and use AWS Resource Access Manager (RAM) to share the Transit Gateway with other accounts.
- B
Establish VPC peering connections between all VPCs across accounts and Regions.
- C
Use AWS Direct Connect to establish private connectivity between all accounts and Regions.
- D
Deploy a fully meshed VPN setup between all VPCs across accounts and Regions.
Show answer and explanation
Correct answer: A
Explanation
AWS Transit Gateway is the most suitable solution for routing and connectivity across multiple AWS accounts and Regions. It simplifies network management by acting as a central hub for VPC connectivity, and with AWS RAM, you can share the Transit Gateway with other accounts. This approach is scalable and requires minimal operational overhead compared to alternatives like VPC peering or a fully meshed VPN setup.
- A. Correct.
This is the correct solution. AWS Transit Gateway allows you to connect multiple VPCs across accounts and Regions through a central hub. Using AWS RAM, you can share the Transit Gateway with other accounts, enabling scalable and manageable routing.
- B. Incorrect.
While VPC peering can connect VPCs across accounts and Regions, it does not scale well for many VPCs because you must manually create and manage peering connections between every pair of VPCs.
- C. Incorrect.
AWS Direct Connect is used for establishing private connectivity between on-premises networks and AWS, not for connecting VPCs across accounts and Regions.
- D. Incorrect.
A fully meshed VPN setup would require creating and managing a large number of VPN connections, which is operationally complex and does not scale efficiently as the number of VPCs increases.