SAP-C02 Question 34
Single answerYour company has deployed multiple applications across three AWS accounts, each operating within its own VPC. These VPCs are located in the same AWS Region and need to communicate with each other. For security and performance reasons, traffic between the VPCs should not traverse the public internet, and the solution must minimize management overhead. How should you configure the network connectivity between the VPCs to meet these requirements?
- A
Set up VPC peering connections between all VPCs.
- B
Use AWS Transit Gateway to connect the VPCs.
- C
Configure internet gateways and use public IPs to route traffic between VPCs.
- D
Establish VPN connections between the VPCs.
Show answer and explanation
Correct answer: B
Explanation
The most efficient and scalable way to connect multiple VPCs within the same Region is by using AWS Transit Gateway. It provides a hub-and-spoke model for VPC connectivity, reduces the need for multiple VPC peering connections, and ensures that traffic stays within the AWS network rather than traversing the public internet.
- A. Incorrect.
Setting up VPC peering connections can establish private connectivity between VPCs, but it requires a mesh topology for multiple VPCs, leading to significant management overhead as the number of VPCs increases.
- B. Correct.
AWS Transit Gateway is the best solution for connecting multiple VPCs within the same Region. It provides a centralized hub for inter-VPC communication, simplifies network management, and ensures traffic does not traverse the public internet.
- C. Incorrect.
Using internet gateways and public IPs would allow communication between VPCs but violates the requirement to avoid traffic over the public internet. This also poses security risks.
- D. Incorrect.
Establishing VPN connections between the VPCs is possible but unnecessary for VPCs in the same Region. This would add additional overhead and complexity without any significant benefits.