Examkin

Question

Difficulty: MediumAWS Network Services

A cloud architect needs to simplify the network architecture of a large enterprise that has deployed applications across many AWS accounts and Virtual Private Clouds (VPCs). The enterprise wants to route traffic dynamically between these networks and their on-premises data centers without managing a mesh of individual connections. Which service should the architect recommend to solve this requirement?

  1. A
    VPC Peering
  2. B
    Security Groups
  3. AWS Transit GatewayAnswer
  4. D
    AWS Organizations

Answer

AWS Transit Gateway
AWS Transit Gateway functions as a cloud router to connect VPCs and on-premises networks in a hub-and-spoke topology. This eliminates the operational overhead of managing a mesh of point-to-point connections.

Step-by-Step Solution

1
Analyze the business and technical requirements of the scenario.
The scenario requires connecting multiple VPCs and on-premises networks using a centralized hub to avoid a complex mesh of individual connections.
This establishes the need for a central routing service that supports transitive routing.
2
Compare the candidate AWS networking services against the requirement of a centralized hub.
AWS Transit Gateway acts as a central hub (cloud router) for VPCs and on-premises connections, whereas VPC Peering is point-to-point and lacks transitive routing, and Security Groups are firewalls.
This identifies the correct service that simplifies routing for scale.

Key Concept

AWS Transit Gateway serves as a centralized hub to interconnect Virtual Private Clouds (VPCs) and on-premises networks, simplifying connectivity management at scale.
Rate this question

Topics

AWS Network Services

More questions from this topic