ANS-C01 Question 395
Single answerYou are designing a network architecture for a company with multiple AWS accounts. The company requires low-latency connectivity between VPCs in different regions for a critical application. Additionally, they anticipate onboarding more VPCs over time and want a scalable solution. Which of the following options would be the most appropriate setup?
- A
Use VPC peering to establish connections between all VPCs across accounts and regions.
- B
Use a Transit Gateway to establish connections between the VPCs within each region and then use inter-region peering between Transit Gateways for cross-region communication.
- C
Use AWS Direct Connect to create private connections between all VPCs.
- D
Use VPN connections to interconnect all VPCs across accounts and regions.
Show answer and explanation
Correct answer: B
Explanation
Transit Gateway is the most appropriate solution for this scenario because it provides a hub-and-spoke model that simplifies connectivity management as the number of VPCs grows. It supports inter-region peering, which ensures low-latency connections between VPCs in different regions. VPC peering, while useful for simpler setups, does not scale well for larger, multi-account, multi-region architectures. AWS Direct Connect and VPN are not designed for VPC-to-VPC connectivity at scale.
- A. Incorrect.
VPC peering is effective for direct VPC-to-VPC connectivity but does not scale well for a large number of VPCs. Managing peering relationships across multiple accounts and regions becomes complex and unmanageable over time.
- B. Correct.
Using a Transit Gateway provides a scalable and manageable solution for connecting multiple VPCs. Transit Gateways can connect VPCs within a region and use inter-region peering to connect Transit Gateways across regions, which is efficient for large and growing architectures.
- C. Incorrect.
AWS Direct Connect is primarily used for establishing private, low-latency connections between on-premises environments and AWS. It is not suitable for interconnecting multiple VPCs across accounts and regions.
- D. Incorrect.
VPN connections are not ideal for this scenario as they introduce higher latency and do not scale well for connecting multiple VPCs across accounts and regions.