ANS-C01 Question 237
Single answerYou are a network architect working for a company with multiple AWS accounts managed using AWS Organizations. The company requires high-performance and secure communication between VPCs in different AWS accounts and Regions. The solution should minimize operational overhead and support transitive routing between the VPCs. Which of the following options would best meet these requirements?
- A
Set up VPC peering connections between all VPCs across accounts and Regions.
- B
Use AWS Transit Gateway to establish connectivity between the VPCs across accounts and Regions.
- C
Create a shared VPC in one account and attach all other VPCs to it using VPC peering.
- D
Use Direct Connect connections to establish private connectivity between the VPCs.
Show answer and explanation
Correct answer: B
Explanation
AWS Transit Gateway enables scalable and secure communication between VPCs in multiple AWS accounts and Regions. It supports transitive routing, reducing the complexity of managing multiple VPC connections. This makes it an ideal solution for multi-account, multi-Region connectivity with minimal operational overhead.
- A. Incorrect.
VPC peering does not support transitive routing, so it would require creating and managing a large number of individual peering connections, especially in a multi-account, multi-Region setup. This increases operational overhead and does not scale well.
- B. Correct.
AWS Transit Gateway is designed for multi-VPC and multi-account connectivity. It supports transitive routing, simplifies network management, and works across Regions. It is the best fit for the given requirements.
- C. Incorrect.
A shared VPC is limited to a single account and does not support transitive routing. It is not suitable for connecting VPCs across multiple accounts and Regions.
- D. Incorrect.
Direct Connect is designed for private connectivity between on-premises networks and AWS, not for interconnecting VPCs. It is not relevant to this scenario.