SAP-C02 Question 24
Single answerA company has a hybrid architecture with several on-premises data centers connected to AWS through AWS Direct Connect. They need to enable communication between two VPCs in different AWS Regions (Region A and Region B) and their on-premises networks. The solution must minimize latency, simplify routing, and avoid the need for multiple VPN connections. What is the most appropriate solution?
- A
Set up VPC peering between the two VPCs and advertise on-premises routes through Direct Connect.
- B
Use an AWS Transit Gateway in Region A and create transit gateway peering with an AWS Transit Gateway in Region B while attaching both VPCs and Direct Connect gateways to the Transit Gateways.
- C
Create a Site-to-Site VPN connection between the two VPCs and advertise on-premises routes through Direct Connect.
- D
Establish a Direct Connect gateway and attach both VPCs to it while advertising on-premises routes through the gateway.
Show answer and explanation
Correct answer: B
Explanation
The correct solution is to use AWS Transit Gateways in both Regions, connected via transit gateway peering. This allows transitive routing between the VPCs and the on-premises networks via Direct Connect. Transit Gateways simplify the routing configuration and provide high performance for hybrid architectures, making them the best choice for this scenario.
- A. Incorrect.
VPC peering does not support transitive routing, which is required for communication between the VPCs and the on-premises networks. This option will not meet the requirements.
- B. Correct.
Using AWS Transit Gateways with peering provides transitive routing between VPCs in different Regions and on-premises networks via Direct Connect. This solution is scalable, minimizes latency, and simplifies routing.
- C. Incorrect.
Site-to-Site VPN connections introduce higher latency compared to Direct Connect and do not use the existing Direct Connect infrastructure. This option is suboptimal.
- D. Incorrect.
Direct Connect gateways do not provide transitive routing between VPCs and on-premises networks, so this solution will not work for the stated requirements.