SCS-C02 Question 217
Single answerYour company has multiple VPCs in the same AWS Region, and you need to enable secure inter-VPC connectivity between them while minimizing the operational overhead of managing individual peering connections. Additionally, you want to ensure that the data transfer is private and does not traverse the public internet. Which solution would best meet these requirements?
- A
Set up VPC peering between all VPCs and use route tables to manage the connectivity.
- B
Use an AWS Transit Gateway to interconnect all VPCs and route traffic between them.
- C
Enable VPC endpoints in each VPC to achieve inter-VPC communication.
- D
Establish VPN connections between all VPCs for secure communication.
Show answer and explanation
Correct answer: B
Explanation
AWS Transit Gateway is the recommended solution for enabling scalable and secure inter-VPC connectivity within the same region. It provides a centralized hub for managing traffic between VPCs while ensuring private communication without data traversing the public internet. This eliminates the complexity of managing individual peering connections and route tables, making it an ideal choice for the described use case.
- A. Incorrect.
Setting up VPC peering requires managing individual connections between each pair of VPCs, which becomes difficult to scale as the number of VPCs increases. Additionally, it does not inherently provide a centralized management solution.
- B. Correct.
Using an AWS Transit Gateway is the best solution because it provides a scalable and centralized way to interconnect multiple VPCs within a region. Traffic through the Transit Gateway remains private and does not traverse the public internet.
- C. Incorrect.
VPC endpoints are designed to enable private connectivity between VPC resources and AWS services, not for inter-VPC communication. This option is not suitable for the scenario.
- D. Incorrect.
Establishing VPN connections between VPCs is not efficient for this use case. It introduces significant operational overhead and is not a cost-effective or scalable solution for inter-VPC connectivity in the same region.