AWS Certified Advanced Networking – Specialty (ANS-C01)Network ImplementationHard
An organization has multiple AWS accounts and VPCs across different AWS Regions. They need to establish secure and private communication between these VPCs and their on-premises data center, which has a single Direct Connect connection in eu-west-1. The solution must provide global connectivity and simplify routing. Which combination of AWS networking services should be used?
- AVPC Peering and AWS Transit Gateway
- BVPC Endpoints and Route 53 Resolver Endpoints
- CDirect Connect Gateway and AWS Transit Gateway
- DAWS Global Accelerator and Direct Connect
Show answer & explanationAnswer & explanation
Correct answer: C. Direct Connect Gateway and AWS Transit Gateway
Direct Connect Gateway allows a single Direct Connect connection to connect to multiple VPCs in the same or different regions. AWS Transit Gateway simplifies routing by acting as a central hub for all VPCs and the DX Gateway connection, providing global connectivity.
Why the other options are wrong
- A. VPC Peering requires N-squared connections and doesn't simplify global routing or integrate with Direct Connect Gateway directly for multi-region VPCs.
- B. VPC Endpoints and Route 53 Resolver Endpoints are for private access to AWS services and DNS resolution, not for interconnecting VPCs and on-premises globally.
- D. AWS Global Accelerator improves performance for internet-facing applications, but does not provide private connectivity between VPCs and on-premises for internal applications.
DX Gateway with Transit Gateway
Combining Direct Connect Gateway with AWS Transit Gateway provides a scalable and simplified architecture for connecting multiple VPCs (across regions) and on-premises networks via a single Direct Connect connection.
- Direct Connect Gateway links DX to multiple VPCs (same or different regions)
- Transit Gateway acts as a central router for VPCs and DX Gateway
- Simplifies routing complexity compared to VPC peering
- Enables global network architecture with private connectivity
Memory trick: DX Gateway gets on-prem to AWS, Transit Gateway connects everything within AWS and to DX.