ANS-C01 Question 236
Single answerYou are managing a multi-account AWS setup for a global company. The company has multiple VPCs in different AWS Regions across several accounts. These VPCs need to communicate with each other to support inter-application traffic with low latency while minimizing operational overhead. Which solution allows you to implement this connectivity effectively?
- A
Use AWS Transit Gateway in each Region and peer the Transit Gateways across Regions.
- B
Establish VPC Peering connections between all VPCs across accounts and Regions.
- C
Enable AWS PrivateLink for each application and use NLBs to connect the VPCs.
- D
Use a combination of AWS Direct Connect and a third-party VPN to interconnect the VPCs.
Show answer and explanation
Correct answer: A
Explanation
The best solution for connecting multiple VPCs across accounts and Regions is to use AWS Transit Gateway. It simplifies network complexity by providing a central hub for routing. Transit Gateway supports peering across Regions, enabling effective communication between VPCs with minimal operational overhead. Other options, such as VPC Peering, PrivateLink, or Direct Connect with VPN, do not scale or meet the requirements for low latency and efficiency in a multi-account, multi-Region architecture.
- A. Correct.
Correct. AWS Transit Gateway allows you to connect multiple VPCs across accounts and Regions with centralized routing and reduced complexity. Peering Transit Gateways across Regions enables seamless inter-Region communication.
- B. Incorrect.
Incorrect. While VPC Peering can connect VPCs, it does not scale well for complex multi-VPC, multi-Region setups due to the need for manually managing numerous peering connections.
- C. Incorrect.
Incorrect. AWS PrivateLink is designed for specific services rather than general VPC-to-VPC connectivity, making it unsuitable for this use case.
- D. Incorrect.
Incorrect. While AWS Direct Connect can provide a dedicated network connection to AWS, combining it with a third-party VPN does not offer a scalable or operationally efficient solution for interconnecting multiple VPCs across accounts and Regions.