AWS Certified Solutions Architect – ProfessionalDesign Solutions for Organizational ComplexityEasy
A large enterprise is migrating a complex, multi-tiered application from an on-premises data center to AWS. The application has strict latency requirements and utilizes a proprietary messaging queue that cannot be easily replaced or re-architected. The enterprise needs to ensure seamless communication between on-premises components and AWS-hosted components with minimal disruption during the migration. Which solution provides the most efficient and reliable connectivity for this hybrid architecture?
- AImplement an AWS Direct Connect connection with a private VIF to extend the on-premises network into an AWS VPC, ensuring low-latency communication.
- BEstablish an AWS VPN connection between the on-premises data center and a VPC in AWS, then configure routing for the messaging queue.
- CUtilize an internet-based public VPN tunnel to connect the on-premises data center to the AWS VPC, then configure network ACLs.
- DDeploy an Amazon SQS queue in AWS and modify the on-premises application to use it for messaging, then remove the proprietary queue.
Show answer & explanationAnswer & explanation
Correct answer: A. Implement an AWS Direct Connect connection with a private VIF to extend the on-premises network into an AWS VPC, ensuring low-latency communication.
AWS Direct Connect provides a dedicated, private network connection from an on-premises data center to AWS, offering consistent network performance and reduced latency. This is crucial for applications with strict latency requirements and for seamlessly extending the on-premises network.
Why the other options are wrong
- B. AWS VPN provides encrypted connectivity over the public internet, which may not meet strict latency requirements and can have variable performance.
- C. An internet-based public VPN tunnel is unsuitable for strict latency requirements and mission-critical applications due to its reliance on the public internet.
- D. Modifying the application to use Amazon SQS would involve significant re-architecture and replacement of the proprietary queue, which the problem statement explicitly states is not easily achievable.
AWS Direct Connect
AWS Direct Connect establishes a dedicated network connection from your premises to AWS, offering reduced network costs, increased bandwidth throughput, and a more consistent network experience than Internet-based connections.
- Private, dedicated network connection
- Bypasses the public internet
- Offers consistent network performance and reduced latency
- Supports multiple virtual interfaces (VIFs) for different services
Memory trick: Directly Connect for a Smooth Hybrid Path.