A company is setting up a hybrid network architecture. They need to establish a dedicated, private physical connection between their on-premises data center and AWS that bypasses the public internet. Additionally, they must implement a stateless firewall to control inbound and outbound traffic at the subnet boundary.
Which two AWS networking services or features should the company configure to meet these requirements?
- AWS Direct ConnectAnswer
- Network Access Control Lists (Network ACLs)Answer
- CSecurity Groups
- DAWS Transit Gateway
- EVPC Peering
Answer
The company should select AWS Direct Connect to establish a dedicated, private connection to their on-premises data center, and Network Access Control Lists (Network ACLs) to serve as a stateless firewall at the subnet boundary.
AWS Direct Connect establishes a dedicated, private physical network connection from the customer's on-premises environment to AWS, bypassing the public internet to deliver consistent performance. Network Access Control Lists (Network ACLs) serve as a stateless security layer at the subnet boundary, requiring explicit rules for both inbound and outbound traffic.
Step-by-Step Solution
Key Concept
AWS hybrid connectivity options and VPC network security boundaries.