SAP-C02 Question 35
Single answerYour company has deployed a multi-tier application across multiple Amazon VPCs in the same AWS Region. The application consists of a front-end web tier in VPC-A, an application processing tier in VPC-B, and a database tier in VPC-C. Connectivity between the VPCs must be highly available, low latency, and scalable. You also need to ensure the network traffic stays within the AWS backbone and does not traverse the public internet. Which solution should you implement to meet these requirements?
- A
Set up VPC Peering connections between VPC-A, VPC-B, and VPC-C.
- B
Use AWS Transit Gateway to establish connectivity between the VPCs.
- C
Create VPN connections between VPC-A, VPC-B, and VPC-C.
- D
Configure private endpoints in all VPCs for inter-VPC communication.
Show answer and explanation
Correct answer: B
Explanation
AWS Transit Gateway is the best solution for connecting multiple VPCs in a scalable and highly available manner while keeping traffic within the AWS backbone. It simplifies network management by acting as a centralized hub for inter-VPC communication, avoiding the complexity of point-to-point VPC Peering connections. The other options are either not scalable, not designed for inter-VPC communication, or do not meet the requirement to use the AWS backbone.
- A. Incorrect.
VPC Peering can connect the VPCs, but it does not scale well for multiple VPCs and requires manual configuration of peering connections and route tables. It also does not provide centralized management.
- B. Correct.
AWS Transit Gateway is the recommended solution as it provides scalable, highly available, and low-latency connectivity between multiple VPCs. It also ensures traffic stays within the AWS backbone.
- C. Incorrect.
VPN connections are designed for connecting on-premises networks to AWS, not for inter-VPC communication. They also rely on the public internet, which does not meet the requirement to keep traffic within the AWS backbone.
- D. Incorrect.
Private endpoints are used for connecting to AWS services like S3 or DynamoDB, not for inter-VPC communication. They are not suitable for this scenario.