SAP-C02 Question 33
Select 2Your company has a multi-account AWS setup with multiple VPCs across different AWS Regions. You have been tasked to build secure and scalable network connectivity between VPCs in the same Region, as well as between VPCs in different Regions. The solution must minimize inter-Region data transfer costs while allowing direct communication between VPCs. Which combination of solutions would best meet these requirements?
- A
Use VPC Peering for connectivity between VPCs in the same Region.
- B
Use AWS Transit Gateway for connectivity between VPCs in the same Region.
- C
Use VPC Peering for connectivity between VPCs in different Regions.
- D
Use AWS Transit Gateway with inter-Region peering for connectivity between VPCs in different Regions.
- E
Use an internet gateway and public IPs for cross-Region communication between VPCs.
Show answer and explanation
Correct answers: A, D
Explanation
For intra-Region connectivity, VPC Peering is the most cost-efficient and secure option as it allows direct communication without additional intermediary services. For inter-Region connectivity, AWS Transit Gateway with inter-Region peering is the preferred solution, as it reduces inter-Region data transfer costs, simplifies routing, and scales better in complex environments.
- A. Correct.
VPC Peering is a cost-effective and secure solution for connectivity between VPCs in the same Region, as it eliminates the need for an intermediary such as a Transit Gateway, reducing costs.
- B. Incorrect.
While AWS Transit Gateway can be used for intra-Region connectivity, it may introduce additional costs compared to VPC Peering. Transit Gateway is better suited for complex architectures involving many VPCs.
- C. Incorrect.
While VPC Peering supports cross-Region connectivity, it incurs higher data transfer costs compared to Transit Gateway with inter-Region peering. It’s not an optimal choice for cross-Region communication.
- D. Correct.
AWS Transit Gateway with inter-Region peering is the recommended approach for cross-Region connectivity between VPCs. It reduces inter-Region data transfer costs and simplifies routing.
- E. Incorrect.
Using an internet gateway and public IPs for cross-Region communication is not secure and incurs additional data transfer costs. This approach is not recommended for private VPC-to-VPC communication.