AWS Certified DevOps Engineer – ProfessionalResilient Cloud SolutionsHard
A large enterprise uses multiple Amazon VPCs across several AWS accounts to host various applications. They need to establish secure and highly available network connectivity between these VPCs and their on-premises data centers. Furthermore, they require centralized network management and routing control. The current solution involves multiple Site-to-Site VPN connections, which are becoming difficult to manage and scale. Which AWS networking service should they implement to simplify and centralize their network architecture?
- ACreate an AWS Client VPN endpoint to allow remote users to access resources in multiple VPCs.
- BSet up VPC Peering connections between all required VPCs and use AWS Direct Connect for on-premises connectivity.
- CImplement AWS Transit Gateway to act as a central hub for all VPCs and connect to on-premises via VPN or Direct Connect Gateway.
- DUse Amazon Route 53 Resolver Endpoints for DNS resolution across VPCs and on-premises networks.
Show answer & explanationAnswer & explanation
Correct answer: C. Implement AWS Transit Gateway to act as a central hub for all VPCs and connect to on-premises via VPN or Direct Connect Gateway.
AWS Transit Gateway acts as a central hub that connects VPCs and on-premises networks through a single gateway. This simplifies network architecture, providing centralized routing and management for thousands of VPCs and up to 50 Gbps Direct Connect connectivity. It eliminates the need for multiple, complex VPC peering connections and simplifies managing VPNs to on-premises.
Why the other options are wrong
- A. Client VPN is for remote user access to VPCs, not for inter-VPC and on-premises data center connectivity.
- B. VPC Peering creates a mesh network which is difficult to scale and manage for many VPCs; it doesn't offer centralized routing or simplify on-premises connectivity as effectively as Transit Gateway.
- D. Route 53 Resolver Endpoints are for DNS resolution, not for centralizing network connectivity and routing for traffic flow.
AWS Transit Gateway
A network transit hub that centralizes network connectivity for VPCs and on-premises networks, simplifying routing and management.
- Connects thousands of VPCs and on-premises networks.
- Simplifies network architecture and reduces operational overhead.
- Acts as a central gateway for inter-VPC and hybrid cloud connectivity.
Memory trick: Transit Gateway: Tame your traffic, centralize your connections.