SAP-C02 Question 475
Single answerYour company is migrating a critical monolithic application to AWS. The application has a high volume of traffic and is sensitive to latency. As part of the migration, the team has decided to break the application into microservices and deploy them across multiple Availability Zones using Amazon ECS with Fargate. The microservices need to communicate securely with each other, and you must ensure minimal operational overhead while enabling secure service-to-service communication. Which solution should you implement?
- A
Use Amazon API Gateway to manage and secure communication between the microservices.
- B
Implement an Application Load Balancer (ALB) for each microservice to manage communication.
- C
Enable AWS App Mesh to provide service discovery, secure communication, and traffic control between the services.
- D
Manually configure security groups for each ECS service to secure communication.
Show answer and explanation
Correct answer: C
Explanation
AWS App Mesh is the most suitable solution for securely managing communication between microservices in a distributed architecture. It simplifies service-to-service communication with built-in features such as secure communication (mTLS), traffic routing, and monitoring, reducing operational overhead. Other options either do not meet the requirements or introduce unnecessary complexity and cost.
- A. Incorrect.
Amazon API Gateway is typically used to expose APIs to external clients or manage API traffic. While it can manage secure communication, it is not an ideal solution for service-to-service communication in a microservices architecture within a VPC.
- B. Incorrect.
Using individual Application Load Balancers for each microservice increases operational complexity and cost. It is not a scalable or efficient solution for service-to-service communication.
- C. Correct.
AWS App Mesh is specifically designed to manage service-to-service communication in microservices architectures. It provides features like service discovery, secure communication using mutual TLS (mTLS), and traffic control, all with minimal operational overhead.
- D. Incorrect.
Manually configuring security groups for each ECS service can secure communication, but it requires significant manual effort and lacks advanced features like service discovery and traffic control.