ANS-C01 Question 385
Select 2You are managing a multi-account AWS environment connected through AWS Transit Gateway. A user in one of the accounts reports that they are unable to access a specific EC2 instance in another account. You suspect a routing issue. Which of the following AWS tools can you use to diagnose and resolve the problem?
- A
AWS Reachability Analyzer
- B
AWS Transit Gateway Network Manager
- C
AWS Trusted Advisor
- D
AWS Config
- E
VPC Flow Logs
Show answer and explanation
Correct answers: A, B
Explanation
AWS Reachability Analyzer and AWS Transit Gateway Network Manager are the most appropriate tools for diagnosing routing issues in a multi-account setup using Transit Gateway. Reachability Analyzer traces paths to identify misconfigurations, while Transit Gateway Network Manager provides insights into the Transit Gateway's routing and topology. Other tools, such as Trusted Advisor, AWS Config, and VPC Flow Logs, do not directly address routing diagnostics or are less suited for this specific scenario.
- A. Correct.
AWS Reachability Analyzer is designed to analyze and trace network paths between resources. It can help identify routing issues and misconfigurations across VPCs and accounts.
- B. Correct.
AWS Transit Gateway Network Manager provides insights into the Transit Gateway's network topology and routing. It can help track connectivity issues in a multi-account Transit Gateway setup.
- C. Incorrect.
AWS Trusted Advisor provides best-practice recommendations for optimizing your AWS environment. However, it is not a tool for diagnosing specific routing issues.
- D. Incorrect.
AWS Config is a configuration management tool that tracks resource configurations over time. While it can provide historical data on resources, it does not actively diagnose routing issues.
- E. Incorrect.
VPC Flow Logs capture IP traffic flowing to and from resources within a VPC. While useful for analyzing traffic patterns, it does not directly diagnose routing or connectivity issues.