Question

Difficulty: MediumAWS Network Services

A digital media firm has established 1515 separate Virtual Private Clouds (VPCs) to isolate various production workloads. The firm wants to enable communication among all these VPCs and route traffic through a central hub, while avoiding the overhead of creating and maintaining a complex, point-to-point network mesh. Which AWS service or feature is designed to act as a centralized regional router to simplify this connectivity?

  1. A
    Security Groups
  2. B
    VPC Peering
  3. AWS Transit GatewayAnswer
  4. D
    Network Access Control Lists

Answer

AWS Transit Gateway
AWS Transit Gateway acts as a centralized regional router, allowing multiple VPCs and on-premises networks to connect to a single hub. This design simplifies network topology and eliminates the complexity of managing a large number of individual point-to-point connections.

Step-by-Step Solution

1
Evaluate the architectural requirement of connecting 1515 VPCs through a central hub while avoiding point-to-point connections.
Determine that a hub-and-spoke networking model is needed to eliminate the complexity of a full-mesh peering configuration.
Connecting 1515 VPCs using point-to-point peering requires 15×(151)2=105\frac{15 \times (15-1)}{2} = 105 connections, which creates high operational overhead.
2
Identify the AWS networking service designed to serve as a centralized hub or cloud router.
Identify AWS Transit Gateway as the service that connects VPCs and on-premises networks through a central router.
AWS Transit Gateway simplifies network routing and architecture by allowing all VPCs to connect to a single gateway instead of peering directly with one another.

Key Concept

AWS Transit Gateway simplifies multi-VPC networking by serving as a centralized regional router, eliminating the need for a complex mesh of VPC peering connections.
Rate this question