AWS Certified Solutions Architect – Associate (SAA-C03)Design High-Performing ArchitecturesMedium
A large enterprise has multiple business units, each with its own VPC in the same AWS region. They need to establish secure and high-bandwidth network connectivity between these VPCs for shared services and data exchange, without exposing traffic to the public internet. The solution must simplify network management and scale efficiently as more VPCs are added.
- AUtilize AWS Transit Gateway.
- BDeploy a VPN connection for each VPC pair.
- CUse a public internet gateway and route traffic through it.
- DCreate VPC Peering connections between every pair of VPCs.
Show answer & explanationAnswer & explanation
Correct answer: A. Utilize AWS Transit Gateway.
AWS Transit Gateway simplifies network management by acting as a central hub for connecting VPCs and on-premises networks. It provides a highly scalable and resilient solution for inter-VPC connectivity, eliminating the need for complex mesh networks of VPC peering connections, especially as the number of VPCs grows.
Why the other options are wrong
- B. VPN connections are typically for connecting on-premises to AWS or specific point-to-point secure tunnels, not for managing large-scale inter-VPC connectivity within AWS efficiently.
- C. Routing traffic through a public internet gateway would expose internal network traffic to the public internet, violating the 'without exposing traffic to the public internet' requirement.
- D. VPC peering is suitable for a small number of VPCs, but it creates a complex 'mesh' network where N VPCs require N*(N-1)/2 peering connections, which is unmanageable for many VPCs.
AWS Transit Gateway
AWS Transit Gateway is a network transit hub that you can use to interconnect your virtual private clouds (VPCs) and on-premises networks.
- Simplifies network topology by acting as a central hub.
- Scales efficiently for connecting hundreds of VPCs.
- Provides centralized routing and network security.
- Supports inter-region peering and Direct Connect Gateway integration.
Memory trick: Transit Gateway: Transform Traffic, Transparently.