A large enterprise with hundreds of AWS accounts and VPCs needs to establish private and secure connectivity between their on-premises network and their AWS resources. They require high bandwidth and consistent network performance, bypassing the public internet, and the solution must support connectivity to multiple VPCs across different AWS Regions. Which networking service combination should they use to meet these requirements?
- AAWS Global Accelerator with VPN CloudHub
- BAWS Site-to-Site VPN with Transit Gateway
- CVPC Peering with AWS Client VPN
- DAWS Direct Connect with Direct Connect Gateway and Transit Gateway
Show answer & explanationAnswer & explanation
Correct answer: D. AWS Direct Connect with Direct Connect Gateway and Transit Gateway
AWS Direct Connect provides a dedicated, private connection to AWS, bypassing the public internet, offering high bandwidth and consistent performance. Direct Connect Gateway enables connectivity from a single Direct Connect connection to multiple VPCs across different AWS Regions. Transit Gateway centralizes routing and simplifies network architecture across many VPCs.
Why the other options are wrong
- A. Global Accelerator is for improving application performance over the internet, not for private on-premises connectivity, and VPN CloudHub is for connecting multiple VPNs.
- B. Site-to-Site VPN uses the public internet, which does not guarantee high bandwidth or consistent performance, failing to meet key requirements.
- C. VPC Peering is for connecting two VPCs directly and does not provide on-premises connectivity to multiple VPCs across regions, nor does Client VPN provide a dedicated private connection for data centers.
Direct Connect Gateway with Transit Gateway
A networking architecture combining AWS Direct Connect, Direct Connect Gateway, and Transit Gateway to establish private, high-bandwidth, and scalable connectivity between on-premises networks and multiple AWS VPCs across different regions.
- Direct Connect provides a dedicated private connection.
- Direct Connect Gateway allows a single DX connection to reach VPCs in any supported AWS region.
- Transit Gateway centralizes routing and simplifies connectivity for a large number of VPCs.
Memory trick: Directly Connect your Gateway to Transit through the Cloud.