AWS Certified Solutions Architect – ProfessionalDesign for New SolutionsMedium
A multinational corporation is migrating its on-premises enterprise resource planning (ERP) system to AWS. The ERP system requires extremely stable and predictable network performance, low latency, and high bandwidth connectivity to AWS services while maintaining strict data sovereignty and security controls. The current on-premises data centers are geographically dispersed but within the same continent as the target AWS regions. Which connectivity solution should the company implement?
- AInternet Gateway with public internet routing to AWS services.
- BAWS Transit Gateway with VPC Peering connections.
- CAWS Site-to-Site VPN with multiple VPN tunnels.
- DAWS Direct Connect with multiple dedicated connections.
Show answer & explanationAnswer & explanation
Correct answer: D. AWS Direct Connect with multiple dedicated connections.
AWS Direct Connect provides a dedicated, private network connection from an on-premises data center to AWS. This offers consistent network performance, lower latency, and higher bandwidth compared to internet-based VPNs, crucial for an ERP system with strict requirements.
Why the other options are wrong
- A. Using the public internet via an Internet Gateway does not provide the required predictability, low latency, high bandwidth, or security for a critical ERP system.
- B. AWS Transit Gateway is for interconnecting VPCs and on-premises networks (often via Direct Connect or VPN), but it's not the primary connectivity solution for the on-premises link itself.
- C. Site-to-Site VPN uses the public internet, which can introduce variability in performance and latency, and does not meet the 'extremely stable and predictable' requirement.
AWS Direct Connect
AWS Direct Connect is a cloud service solution that links your internal network to an AWS Direct Connect location over a standard Ethernet fiber optic cable. It establishes a dedicated network connection between your premises and AWS.
- Provides a dedicated, private connection.
- Bypasses the public internet, reducing latency and increasing predictability.
- Supports higher bandwidth throughput than VPN connections.
Memory trick: Direct Connect is the Dedicated Path for Predictable Performance.