A global manufacturing company has multiple production facilities worldwide, each with its own on-premises network and applications. They need to establish secure, high-bandwidth, and low-latency connectivity between these facilities and a central AWS Region where their core enterprise resource planning (ERP) system is hosted. The company also requires redundant connections to ensure business continuity. Which networking solution should a Solutions Architect recommend?
- ADeploy AWS Direct Connect Gateway with multiple Direct Connect connections from each facility to different AWS Direct Connect locations.
- BEstablish multiple IPsec VPN connections from each facility to the central AWS Region.
- CUtilize AWS Client VPN to allow individual users from each facility to connect to the AWS VPC.
- DImplement AWS Site-to-Site VPN connections over AWS Transit Gateway for each facility.
Show answer & explanationAnswer & explanation
Correct answer: A. Deploy AWS Direct Connect Gateway with multiple Direct Connect connections from each facility to different AWS Direct Connect locations.
AWS Direct Connect Gateway with multiple Direct Connect connections provides dedicated, high-bandwidth, and low-latency connectivity between on-premises networks and AWS. Using multiple connections to different Direct Connect locations ensures redundancy and business continuity, which is critical for a global manufacturing company's ERP system.
Why the other options are wrong
- B. IPsec VPN connections are suitable for secure connectivity but typically offer lower bandwidth and higher latency compared to Direct Connect, and managing many individual VPNs can become complex for a global setup.
- C. AWS Client VPN is designed for individual user access to AWS resources, not for establishing site-to-site network connectivity between entire facilities and AWS.
- D. While AWS Site-to-Site VPN over Transit Gateway provides a centralized routing mechanism for VPNs, it still relies on internet-based VPN connections, which do not offer the dedicated bandwidth, lower latency, and consistent performance guarantees of AWS Direct Connect.
AWS Direct Connect Gateway
A global service that allows you to connect your on-premises network to one or more Amazon Virtual Private Clouds (VPCs) in any AWS Region using a single AWS Direct Connect connection.
- Enables global network connectivity over Direct Connect.
- Provides high bandwidth and low latency.
- Supports redundant connections for business continuity.
Memory trick: Direct Connect Gateway: Your global, fast lane to the cloud.