AWS Certified Solutions Architect – ProfessionalDesign Solutions for Organizational ComplexityEasy
A large enterprise is migrating a complex, multi-tiered application from an on-premises data center to AWS. The application has strict latency requirements (sub-10ms) for its database interactions and requires dedicated, high-throughput network connectivity to the AWS VPC. The on-premises infrastructure includes a robust network backbone. Which AWS service should be recommended for connecting the on-premises data center to the AWS VPC?
- AAWS Client VPN for remote access to the VPC.
- BAWS Direct Connect with a dedicated connection.
- CAWS Transit Gateway with multiple VPN attachments.
- DAWS Site-to-Site VPN over the public internet.
Show answer & explanationAnswer & explanation
Correct answer: B. AWS Direct Connect with a dedicated connection.
AWS Direct Connect provides a dedicated, private network connection from an on-premises data center to an AWS VPC. This offers consistent high bandwidth and significantly lower latency compared to internet-based VPN connections, directly meeting the sub-10ms latency and high-throughput requirements for mission-critical applications.
Why the other options are wrong
- A. AWS Client VPN is designed for individual users to securely access AWS resources from remote locations, not for establishing a high-throughput, low-latency network connection between an entire on-premises data center and an AWS VPC.
- C. AWS Transit Gateway can centralize VPN connections, but if those VPNs are still over the public internet, they will not meet the strict latency and bandwidth consistency requirements. Transit Gateway itself doesn't provide the underlying physical connection.
- D. AWS Site-to-Site VPN uses the public internet, which introduces variable latency and bandwidth, making it unsuitable for applications with strict sub-10ms latency requirements.
AWS Direct Connect
A network service that provides a dedicated network connection from your premises to AWS, bypassing the public internet.
- Offers consistent high bandwidth and low latency.
- Reduces network costs and increases reliability.
- Suitable for hybrid cloud environments and large data transfers.
Memory trick: Direct Connect: The private highway to your cloud.