AWS Certified Advanced Networking – Specialty (ANS-C01)Network DesignEasy
A financial institution needs to establish a highly secure and private connection between its on-premises data center and its AWS VPCs. This connection must support high bandwidth and consistently low latency for sensitive transaction data. The solution should also be resilient to single points of failure. Which AWS hybrid connectivity option is most appropriate?
- AAWS Site-to-Site VPN
- BVPC Peering with a Bastion Host
- CInternet Gateway with IPsec VPN
- DAWS Direct Connect
Show answer & explanationAnswer & explanation
Correct answer: D. AWS Direct Connect
AWS Direct Connect provides a dedicated, private network connection between your on-premises data center and AWS. It offers high bandwidth, consistently low latency, and enhanced security compared to internet-based connections, making it ideal for sensitive data and high-performance requirements. For resilience, multiple Direct Connect connections can be deployed.
Why the other options are wrong
- A. AWS Site-to-Site VPN uses encrypted tunnels over the public internet, which may not meet the 'consistently low latency' or 'high bandwidth' requirements as well as Direct Connect.
- B. VPC Peering connects two VPCs within AWS and does not provide connectivity to an on-premises data center.
- C. An Internet Gateway exposes the VPC to the public internet, and while IPsec VPN adds encryption, it still relies on the public internet, failing the 'private' and 'consistently low latency' requirements.
AWS Direct Connect
A cloud service solution that links your internal network to an AWS Direct Connect location over a standard Ethernet fiber-optic cable, creating a private, high-bandwidth connection.
- Dedicated network connection, not over the public internet.
- Offers high bandwidth (1 Gbps, 10 Gbps, or 100 Gbps).
- Provides consistently lower network costs and reduced latency.
- Enhanced security for sensitive data.
Memory trick: Direct Connect: A direct 'road' to AWS, not the public 'highway'.