SAP-C02 Question 21
Select 2A company has multiple VPCs in the us-east-1 region that need to communicate with resources in an on-premises data center. The company uses a single AWS Direct Connect connection to establish connectivity between AWS and the on-premises environment. The company also needs to ensure that traffic between the VPCs in AWS does not traverse through the on-premises data center. Which solution meets these requirements?
- A
Use an AWS Transit Gateway to connect all VPCs and the Direct Connect gateway.
- B
Create a VPC peering connection between each pair of VPCs and route traffic through the Direct Connect connection.
- C
Establish a Direct Connect gateway and associate it with the Transit Gateway.
- D
Deploy a Virtual Private Gateway in each VPC and route all traffic through the on-premises network.
- E
Configure inter-VPC communication using VPC peering and use the Direct Connect gateway for on-premises connectivity.
Show answer and explanation
Correct answers: A, C
Explanation
The correct solution is to use an AWS Transit Gateway to manage inter-VPC communication while also leveraging a Direct Connect gateway for on-premises connectivity. This setup ensures inter-VPC traffic is routed directly within AWS and does not traverse the on-premises environment. The Transit Gateway simplifies network management and scalability compared to VPC peering, which becomes cumbersome in environments with many VPCs.
- A. Correct.
Correct. AWS Transit Gateway is designed to enable communication between multiple VPCs and on-premises networks without needing to create a full mesh of VPC peering connections. This ensures efficient routing.
- B. Incorrect.
Incorrect. Using VPC peering for all VPCs and routing traffic through the Direct Connect connection does not meet the requirement of avoiding on-premises traversal for inter-VPC traffic. VPC peering also becomes complex to manage at scale.
- C. Correct.
Correct. Associating the Transit Gateway with the Direct Connect gateway ensures that on-premises traffic can reach all connected VPCs via the Direct Connect link.
- D. Incorrect.
Incorrect. Routing all traffic through the on-premises network violates the requirement that inter-VPC traffic should not traverse the on-premises environment.
- E. Incorrect.
Incorrect. While VPC peering can enable inter-VPC communication, it does not scale well for multiple VPCs and is less efficient compared to using a Transit Gateway.