ANS-C01 Question 243
Single answerYour organization has multiple AWS accounts managed under AWS Organizations. Each account hosts its own VPCs, which need to communicate with one another. The organization also requires connectivity between these VPCs to be scalable, centrally managed, and cost-efficient. Which AWS service or solution should you implement to meet these requirements?
- A
VPC Peering
- B
AWS Direct Connect
- C
AWS Transit Gateway
- D
Site-to-Site VPN
Show answer and explanation
Correct answer: C
Explanation
AWS Transit Gateway is the best solution for connecting multiple VPCs across AWS accounts in a scalable and centralized manner. It acts as a hub for inter-VPC traffic, simplifying management and reducing the complexity of maintaining multiple VPC peering connections. Alternatives such as VPC Peering and Site-to-Site VPN lack scalability and central management, while AWS Direct Connect is unrelated to inter-VPC communication.
- A. Incorrect.
VPC Peering allows direct communication between two VPCs. However, it is not scalable for scenarios with multiple VPCs and does not offer centralized management, making it unsuitable for the given requirements.
- B. Incorrect.
AWS Direct Connect provides a private, dedicated connection between on-premises resources and AWS. It does not facilitate inter-VPC communication, so it is not applicable in this scenario.
- C. Correct.
AWS Transit Gateway is designed for scalable and centralized inter-VPC and multi-account connectivity. It enables VPCs to connect to a central hub, simplifying network management and meeting the requirements stated in the question.
- D. Incorrect.
Site-to-Site VPN establishes secure connections between on-premises environments and AWS or between VPCs. However, it is not an efficient or scalable solution for managing connectivity across multiple VPCs within an organization.