ANS-C01 Question 360
Select 3You are designing a multi-region architecture for an application that needs to transfer data between two VPCs located in different AWS Regions. The communication must be secure, have low latency, and avoid using the public internet. Which of the following options can facilitate this communication?
- A
Use VPC Peering between the two VPCs across AWS Regions.
- B
Establish an AWS Transit Gateway and configure inter-Region peering attachments.
- C
Set up a VPN connection over the public internet between the two VPCs.
- D
Use AWS Direct Connect Gateway with inter-Region routing enabled.
- E
Establish an S3 bucket in one Region and replicate data to another Region.
Show answer and explanation
Correct answers: A, B, D
Explanation
To securely and efficiently enable inter-Region communication between VPCs without using the public internet, you can use VPC Peering, AWS Transit Gateway with inter-Region peering attachments, or AWS Direct Connect Gateway with inter-Region routing. These solutions ensure traffic remains secure, private, and low-latency. VPN and S3 replication fail to meet the specific requirements of the scenario.
- A. Correct.
VPC Peering supports inter-Region communication, and it allows secure, low-latency traffic between two VPCs without traversing the public internet.
- B. Correct.
AWS Transit Gateway supports inter-Region peering attachments, enabling secure and scalable communication between VPCs in different Regions.
- C. Incorrect.
While a VPN connection could establish secure communication, it would traverse the public internet and does not meet the requirement to avoid public internet usage.
- D. Correct.
AWS Direct Connect Gateway with inter-Region routing enabled can facilitate secure and private communication between VPCs in different Regions, avoiding the public internet.
- E. Incorrect.
Using an S3 bucket with data replication does not provide direct communication between VPCs and is not suitable for low-latency, secure communication.