Question

Difficulty: MediumAWS Network Services

A company is expanding its AWS infrastructure by creating eight Virtual Private Clouds (VPCs) across different AWS accounts to isolate development environments. The network team needs to allow all these VPCs to communicate with one another. To minimize administrative overhead, the solution must avoid the complexity of managing a large mesh of point-to-point connections. Which AWS service or feature should the company use to satisfy these requirements?

  1. AWS Transit GatewayAnswer
  2. B
    A full mesh of VPC Peering connections
  3. C
    A centralized Network Access Control List (NACL) configured to route traffic between VPCs
  4. D
    AWS CloudFormation to automatically provision and manage route tables in each VPC

Answer

AWS Transit Gateway
AWS Transit Gateway is the correct solution because it acts as a centralized cloud router that simplifies network architecture by connecting multiple VPCs and on-premises networks. It eliminates the need to manage a complex mesh of individual VPC peering connections.

Step-by-Step Solution

1
Analyze the requirement to connect eight Virtual Private Clouds (VPCs) while avoiding a complex mesh of point-to-point connections.
Identify that point-to-point connections like VPC Peering will scale poorly (requiring N(N1)2=28\frac{N(N-1)}{2} = 28 connections) and increase administrative overhead.
This establishes the need for a hub-and-spoke network topology rather than a mesh network.
2
Evaluate AWS networking services that can act as a central hub to simplify multi-VPC routing.
Identify AWS Transit Gateway as the service designed to connect multiple VPCs and on-premises networks to a single gateway.
AWS Transit Gateway acts as a regional virtual router, reducing the number of connections and simplifying route table management.

Key Concept

AWS Transit Gateway acts as a centralized cloud router to simplify multi-VPC network architectures.
Estimated Time:1m 30s
Rate this question