AWS Certified SysOps Administrator – AssociateNetworking and Content DeliveryMedium
A company is deploying a multi-tier application in an AWS VPC. The web tier is in public subnets, and the application and database tiers are in private subnets. The application tier needs to connect to the database tier, and both need to connect to an external logging service over the internet. The SysOps administrator wants to simplify network management and routing between these tiers and to the internet, avoiding complex peering connections between multiple VPCs if the architecture scales. Which AWS networking service provides a centralized hub for this connectivity?
- AAWS Transit Gateway.
- BInternet Gateway.
- CVPC Peering.
- DNAT Gateway.
Show answer & explanationAnswer & explanation
Correct answer: A. AWS Transit Gateway.
AWS Transit Gateway acts as a central hub that connects VPCs, AWS accounts, and on-premises networks. It simplifies network architecture by eliminating the need for complex, mesh-like VPC peering connections as the number of VPCs grows, providing centralized routing and management for inter-VPC and hybrid cloud connectivity.
Why the other options are wrong
- B. Internet Gateway provides internet access for a single VPC, but does not manage routing between multiple VPCs.
- C. VPC peering connections are point-to-point and become unmanageable with many VPCs, not simplifying routing.
- D. NAT Gateway provides outbound internet access for private subnets, but does not centralize inter-VPC routing.
AWS Transit Gateway
AWS Transit Gateway is a network transit hub that connects VPCs and on-premises networks, simplifying network architecture and centralizing routing for complex, distributed environments.
- Central hub for VPCs and on-premises networks.
- Simplifies routing and network management.
- Eliminates complex peering connections.
Memory trick: For 'Transit' through many networks, you need a 'Transit Gateway' as the central 'hub'.