AWS Certified Solutions Architect – ProfessionalDesign for New SolutionsEasy
A multinational corporation is migrating its on-premises enterprise resource planning (ERP) system to AWS. The ERP system has strict compliance requirements, including data residency in specific regions and highly sensitive data that must never traverse the public internet. The solution must ensure secure and private connectivity between the on-premises data centers and AWS services, while also providing high bandwidth and low latency. Which networking solution should a solutions architect recommend?
- AAWS Direct Connect with private VIFs
- BAWS Transit Gateway with VPN connections
- CAWS Site-to-Site VPN with public VIFs
- DInternet Gateway with VPC peering
Show answer & explanationAnswer & explanation
Correct answer: A. AWS Direct Connect with private VIFs
AWS Direct Connect with private VIFs provides a dedicated, private network connection between on-premises data centers and AWS, ensuring data never traverses the public internet, offering high bandwidth, and low latency, which meets the strict compliance and performance requirements.
Why the other options are wrong
- B. While AWS Transit Gateway can centralize connectivity, using VPN connections still routes traffic over the public internet, failing the data residency and privacy requirement.
- C. AWS Site-to-Site VPN uses the public internet, which does not meet the requirement for data never traversing the public internet.
- D. Internet Gateway exposes the VPC to the public internet, and VPC peering is for inter-VPC communication within AWS, not for private on-premises connectivity to AWS services without traversing the public internet.
AWS Direct Connect
A cloud service solution that links an organization's on-premises network directly to AWS, bypassing the public internet to reduce network costs, increase bandwidth throughput, and provide a more consistent network experience.
- Establishes a dedicated network connection.
- Bypasses the public internet.
- Offers high bandwidth and low latency.
Memory trick: Direct Connect is a private highway for your data, bypassing public roads.