AWS Certified Advanced Networking – Specialty (ANS-C01)Network ImplementationMedium

A global enterprise has a multi-Region AWS deployment, with VPCs in `us-east-1`, `eu-west-1`, and `ap-southeast-2`. They use AWS Transit Gateway in each Region to connect local VPCs. The enterprise needs to enable secure and low-latency communication between applications running in VPCs across these different Regions. What is the most appropriate networking construct to achieve this goal?

  1. AAWS Direct Connect Gateway with cross-Region VIFs.
  2. BTransit Gateway peering between the Transit Gateways in each Region.
  3. CVPC Peering connections between all inter-Region VPCs.
  4. DAWS Site-to-Site VPN connections between VPCs in different Regions.
Show answer & explanation

Correct answer: B. Transit Gateway peering between the Transit Gateways in each Region.

Transit Gateway peering allows you to connect Transit Gateways in different AWS Regions. This enables inter-Region connectivity between VPCs and on-premises networks that are attached to the peered Transit Gateways, providing a scalable and high-performance solution for global networks.

Why the other options are wrong

  • A. Direct Connect Gateway with cross-Region VIFs is primarily for connecting on-premises networks to multiple VPCs/TGWs across regions, not for inter-VPC communication solely within AWS Regions.
  • C. VPC Peering is a 1:1 connection and does not scale well for a multi-Region hub-and-spoke architecture with many VPCs.
  • D. Site-to-Site VPN connections are generally lower bandwidth and higher latency compared to Transit Gateway peering for inter-Region AWS network traffic.

Transit Gateway Peering

A feature of AWS Transit Gateway that allows you to connect two Transit Gateways in different AWS Regions, enabling inter-Region network connectivity.

  • Connects TGWs across different AWS Regions
  • Enables global network architectures
  • Uses AWS global backbone for high performance
  • Scalable for multi-Region VPC connectivity

Memory trick: Peer your TGWs for global VPC reach.

More Network Implementation questions