A large enterprise has several hundreds of legacy applications running on-premises that need to connect to new microservices deployed in various VPCs across multiple AWS regions. These applications require high-bandwidth, consistent network performance, and secure, private connectivity. The enterprise wants to simplify network management and reduce operational complexity. Which AWS networking service should be used to achieve this?
- AAWS VPN CloudHub
- BAWS Direct Connect with AWS Transit Gateway
- CVPC Peering Connections
- DInternet Gateway with IPsec VPN
Show answer & explanationAnswer & explanation
Correct answer: B. AWS Direct Connect with AWS Transit Gateway
AWS Direct Connect provides a dedicated, private network connection from on-premises to AWS, ensuring high-bandwidth and consistent performance. When combined with AWS Transit Gateway, it allows the enterprise to centralize and simplify connectivity between hundreds of on-premises applications and numerous VPCs across multiple AWS regions, acting as a cloud router and significantly reducing operational complexity.
Why the other options are wrong
- A. AWS VPN CloudHub can connect multiple on-premises networks to AWS using VPNs, but it relies on public internet for connectivity and doesn't offer the dedicated bandwidth or consistent performance of Direct Connect.
- C. VPC Peering Connections are point-to-point connections between two VPCs and do not scale well for hundreds of VPCs or provide direct on-premises connectivity in a centralized manner.
- D. An Internet Gateway with IPsec VPN uses the public internet, which does not guarantee high-bandwidth or consistent performance, and managing hundreds of individual VPNs would be highly complex.
Direct Connect with Transit Gateway
AWS Direct Connect provides private, physical network connections to AWS. AWS Transit Gateway centralizes routing between VPCs and on-premises networks, simplifying complex network architectures.
- Direct Connect: dedicated, private, high-bandwidth path.
- Transit Gateway: central hub for VPC and on-premises connectivity.
- Simplifies network management for hybrid cloud.
Memory trick: Directly connect to a central transit hub for all your cloud needs.