ANS-C01 Question 244
Single answerA company operates multiple AWS accounts as part of their AWS Organizations setup. They want to establish secure, scalable, and cost-effective connectivity between the VPCs in these accounts while ensuring they can centrally manage routing policies. Which solution is the most appropriate for this use case?
- A
Set up VPC peering connections between all the VPCs in the different accounts.
- B
Use AWS Transit Gateway to establish inter-VPC connectivity across accounts.
- C
Establish site-to-site VPN connections between each VPC across the accounts.
- D
Leverage third-party SD-WAN solutions for inter-VPC connectivity.
Show answer and explanation
Correct answer: B
Explanation
AWS Transit Gateway is designed to simplify and scale inter-VPC and multi-account connectivity. It acts as a central hub for routing traffic between connected VPCs and other networks. It integrates seamlessly with AWS Organizations, supports centralized routing policies, and eliminates the complexity of managing individual VPC peering connections or VPNs. This makes it the optimal choice for secure and scalable inter-VPC connectivity in multi-account environments.
- A. Incorrect.
VPC peering can work for inter-VPC connectivity, but it does not scale well, as it requires managing individual peering connections and routing tables for each pair of VPCs. This approach becomes inefficient with a large number of VPCs.
- B. Correct.
AWS Transit Gateway is the recommended solution for scalable and centralized inter-VPC connectivity across multiple accounts. It allows you to connect VPCs and on-premises networks through a single hub, simplifying management and routing.
- C. Incorrect.
Site-to-site VPN connections are generally used for hybrid connectivity between on-premises resources and AWS. Using this for inter-VPC connectivity is possible but not cost-effective or scalable.
- D. Incorrect.
Third-party SD-WAN solutions are better suited for hybrid or multi-cloud environments where AWS is just one part of the infrastructure. These are not the most cost-effective or simple solutions for connecting VPCs within AWS accounts.