ANS-C01 Question 348
Single answerYour company has an on-premises data center and uses multiple AWS accounts across different regions. They require a highly available and scalable solution to connect the data center to AWS resources in these accounts and regions. The solution must minimize the number of connections managed on the on-premises side while allowing secure hybrid connectivity. Which of the following connectivity methods would best meet this requirement?
- A
Use a single AWS Direct Connect connection with a Direct Connect gateway to connect to multiple VPCs across regions.
- B
Establish separate Direct Connect connections to each AWS account and region.
- C
Use AWS Site-to-Site VPN with Transit Gateway to connect to multiple VPCs across regions.
- D
Establish a Direct Connect connection to a Transit Gateway and use Transit Gateway peering to connect to other regions.
Show answer and explanation
Correct answer: A
Explanation
The correct solution is to use a single Direct Connect connection with a Direct Connect gateway to connect to multiple VPCs across accounts and regions. This approach minimizes the number of connections managed on the on-premises side, provides high availability, and supports scalable and secure hybrid connectivity. Other options either increase complexity, incur higher costs, or lack the performance benefits of Direct Connect.
- A. Correct.
This is the correct answer. A Direct Connect gateway allows you to connect a single Direct Connect connection to multiple VPCs across AWS accounts and regions. This minimizes the number of connections needed on the on-premises side and provides centralized, scalable, and secure connectivity.
- B. Incorrect.
This is incorrect. Establishing separate Direct Connect connections for each account and region is not scalable and would increase costs and management complexity.
- C. Incorrect.
This is incorrect. While Site-to-Site VPN with Transit Gateway allows connectivity across regions, it does not provide the same performance and reliability as Direct Connect, which is preferred for hybrid connectivity.
- D. Incorrect.
This is incorrect. While Transit Gateway can be used for inter-region connectivity, Direct Connect connections cannot directly connect to a Transit Gateway. Instead, a Direct Connect gateway is required to route traffic between Direct Connect and Transit Gateway.