AWS Certified Advanced Networking – Specialty (ANS-C01)Network ImplementationEasy

A network engineer needs to establish network connectivity between two VPCs, VPC-A (10.0.0.0/16) and VPC-B (10.1.0.0/16), located in different AWS accounts within the same AWS Region. The connection must support high bandwidth and low latency, and the number of connected VPCs is expected to grow significantly over time. Which solution provides the most scalable and efficient way to achieve this connectivity?

  1. ASet up a Site-to-Site VPN connection directly between VPC-A and VPC-B.
  2. BDeploy a NAT Gateway in each VPC and route traffic between them.
  3. CConfigure an AWS Transit Gateway and attach both VPC-A and VPC-B to it.
  4. DEstablish a VPC Peering connection between VPC-A and VPC-B.
Show answer & explanation

Correct answer: C. Configure an AWS Transit Gateway and attach both VPC-A and VPC-B to it.

AWS Transit Gateway is designed for connecting thousands of VPCs and on-premises networks centrally. It simplifies network management and provides a highly scalable solution compared to managing numerous point-to-point VPC Peering connections as the number of VPCs grows.

Why the other options are wrong

  • A. Site-to-Site VPN is primarily for connecting VPCs to on-premises networks securely over the internet, not for high-bandwidth, low-latency inter-VPC connectivity within AWS.
  • B. NAT Gateway is used for allowing private subnets to access the internet or other networks, not for direct inter-VPC communication. Using it for this purpose would be incorrect and inefficient.
  • D. VPC Peering is suitable for a small number of VPCs but becomes unmanageable and complex for a mesh of many VPCs.

AWS Transit Gateway

AWS Transit Gateway connects VPCs and on-premises networks through a central hub, simplifying network management and scaling connectivity.

  • Acts as a cloud router for centralizing network connections.
  • Supports inter-region peering and multi-account connectivity.
  • Eliminates the need for numerous point-to-point connections.

Memory trick: Transit Gateway: The central hub that connects all your cloud lands.

More Network Implementation questions