AWS Certified Cloud Practitioner (CLF-C02)Cloud Technology and ServicesMedium
A company has two VPCs in the same AWS Region: one hosts its production application, and the other hosts an internal analytics service. The company wants instances in both VPCs to communicate using private IP addresses without routing traffic over the public internet. Which solution should the company implement?
- AVPC Peering
- BAmazon CloudFront
- CAWS Direct Connect
- DInternet Gateway
Show answer & explanationAnswer & explanation
Correct answer: A. VPC Peering
VPC Peering establishes a private network connection between two VPCs, allowing resources to communicate as if they were in the same network using private IP addresses.
Why the other options are wrong
- B. CloudFront is a CDN for content delivery, not VPC networking.
- C. Direct Connect provides a dedicated connection between on-premises networks and AWS, not VPC-to-VPC.
- D. Internet Gateway allows internet access, which is the opposite of private cross-VPC communication.
VPC Peering
A networking connection between two VPCs that enables routing of traffic using private IP addresses without going through the public internet.
- Non-transitive: peering doesn't extend beyond the two directly connected VPCs
- Can connect VPCs in the same or different accounts/regions
- Requires route table updates on both VPCs
Memory trick: Peering builds a private bridge between two neighborhoods.