SAP-C02 Question 530
Select 2Your company has a multi-account AWS setup with a central VPC in the networking account for shared services. Applications in other accounts communicate with the central VPC using VPC peering. Recently, the CFO noticed high data transfer costs. How can you optimize the architecture to reduce these costs while maintaining secure connectivity?
- A
Replace VPC peering with AWS Transit Gateway for centralized management and data transfer cost reduction.
- B
Enable VPC peering compression to reduce data transfer costs between accounts.
- C
Use AWS PrivateLink to connect services across accounts instead of VPC peering.
- D
Migrate to AWS Direct Connect Gateway for inter-VPC communication to minimize data transfer costs.
- E
Configure a Transit Gateway with intra-region data transfer pricing for efficient routing.
Show answer and explanation
Correct answers: A, E
Explanation
To reduce data transfer costs in a multi-account environment, replacing VPC peering with AWS Transit Gateway is a recommended approach. It provides a centralized method for inter-VPC communication and offers reduced intra-region data transfer pricing compared to VPC peering. Configuring the Transit Gateway properly ensures optimized routing and cost efficiency. Other options like AWS PrivateLink or Direct Connect Gateway are not suitable for inter-VPC communication in this scenario.
- A. Correct.
Correct: AWS Transit Gateway can replace multiple VPC peering connections and offers reduced intra-region data transfer costs, especially for centralized architectures.
- B. Incorrect.
Incorrect: VPC peering does not support compression, and there is no such feature as 'VPC peering compression' to reduce costs.
- C. Incorrect.
Incorrect: AWS PrivateLink is designed for exposing services securely but can increase costs when used for broader VPC-to-VPC communication across accounts.
- D. Incorrect.
Incorrect: AWS Direct Connect Gateway is primarily used for connecting Direct Connect locations to multiple VPCs but is not relevant for inter-VPC communication within a region.
- E. Correct.
Correct: Configuring a Transit Gateway with intra-region data transfer pricing allows for optimized data routing and cost efficiency compared to VPC peering.