AWS Certified Solutions Architect – ProfessionalAccelerate Workload Migration and ModernizationHard
A multinational corporation is migrating hundreds of applications from its on-premises data centers to AWS. These applications are hosted in multiple AWS accounts and VPCs across several regions. The company requires secure, high-bandwidth connectivity between all VPCs and the on-premises network, with simplified network management and centralized control. Which AWS networking solution BEST meets these requirements?
- AAWS Transit Gateway with VPN connections to on-premises.
- BAWS Transit Gateway with AWS Direct Connect to on-premises.
- CVPC Peering Connections between all VPCs and AWS Direct Connect to on-premises.
- DAWS VPN CloudHub for inter-region connectivity and AWS Direct Connect to on-premises.
Show answer & explanationAnswer & explanation
Correct answer: B. AWS Transit Gateway with AWS Direct Connect to on-premises.
AWS Transit Gateway provides a central hub for connecting multiple VPCs and on-premises networks across regions and accounts. Combining it with AWS Direct Connect offers secure, high-bandwidth, and low-latency connectivity to on-premises, simplifying network management compared to a mesh of VPC peering connections.
Why the other options are wrong
- A. While Transit Gateway is excellent for VPC and on-premises connectivity, using VPN connections for high-bandwidth needs (as implied by 'hundreds of applications' and 'multinational corporation') might not provide the required performance or reliability compared to Direct Connect.
- C. VPC Peering connections create a full mesh for hundreds of VPCs, leading to complex routing tables and management overhead (N*(N-1)/2 connections). Direct Connect is good for on-premises, but peering doesn't scale well for many VPCs.
- D. AWS VPN CloudHub is for connecting multiple on-premises VPNs to a single AWS VPC or connecting multiple VPNs to each other. It doesn't offer the centralized routing and scale of Transit Gateway for connecting hundreds of VPCs across multiple accounts and regions, nor does it provide the performance of Direct Connect.
AWS Transit Gateway with Direct Connect
A combination of AWS Transit Gateway as a central routing hub for VPCs and on-premises networks, and AWS Direct Connect for dedicated, high-bandwidth hybrid connectivity.
- Simplifies network topology, reduces peering complexity.
- Enables central management of routing policies.
- Scales to thousands of VPCs across accounts and regions.
- Direct Connect provides private, high-bandwidth, low-latency link to on-premises.
Memory trick: Transit Gateway is The Global Hub