A company has a hybrid network architecture where their on-premises database must replicat… — AWS Certified Solutions Architect - Associate

A company has a hybrid network architecture where their on-premises database must replicate data to multiple Amazon RDS instances deployed across three VPCs in the AWS Cloud. The replication workload requires a continuous, low-latency connection with a guaranteed throughput of $4\text{ Gbps}$ . The architecture must be highly available and resilient to single points of failure. Which TWO steps should the solutions architect take to design a high-performing and scalable network architecture that meets these requirements? (Select TWO.)

Provision two AWS Direct Connect connections at separate Direct Connect locations for redundancy and high performance.Answer
Create an AWS Transit Gateway to interconnect the VPCs, and attach it to a Direct Connect gateway using a transit virtual interface (transit VIF).Answer
C
Establish a single AWS Site-to-Site VPN connection and configure Equal-Cost Multi-Path (ECMP) routing to scale the tunnel throughput to support the $4\text{ Gbps}$ replication workload.
D
Configure Network ACLs on the database subnets to allow inbound replication traffic, without adding corresponding outbound rules, assuming that return traffic will be statefully allowed.
E
Configure Amazon Route 53 with a latency-based routing policy to resolve database endpoints to reduce latency between the on-premises database and the AWS VPCs.

Answer

Provision two AWS Direct Connect connections at separate Direct Connect locations, and create an AWS Transit Gateway to interconnect the VPCs, attaching it to a Direct Connect gateway using a transit virtual interface (transit VIF).

To support a continuous, high-performance database replication workload requiring

4\text{ Gbps}

of low-latency throughput, AWS Direct Connect is the most suitable service. By provisioning two Direct Connect connections at separate physical locations, the architecture ensures high availability and eliminates single points of failure. AWS Transit Gateway simplifies the routing complexity of connecting multiple VPCs to the on-premises network. Attaching the Transit Gateway to a Direct Connect gateway via a transit virtual interface (transit VIF) allows all three VPCs to share the high-throughput Direct Connect connection, optimizing performance and scalability.

Step-by-Step Solution

Determine the throughput and latency requirements.

Database replication requires

4\text{ Gbps}

of continuous, low-latency throughput, ruling out standard VPN connections which are limited to

1.25\text{ Gbps}

per tunnel and run over the public internet.

Establishing a baseline for acceptable physical connectivity options.

Select the appropriate hybrid connectivity service.

Select AWS Direct Connect with two connections at separate physical locations for high availability.

Direct Connect provides dedicated, low-latency, high-performance bandwidth that guarantees the

4\text{ Gbps}

throughput, while multiple locations prevent single points of failure.

Choose the routing architecture to scale across multiple VPCs.

Create an AWS Transit Gateway and connect it to the Direct Connect gateway using a transit VIF.

Transit Gateway simplifies the network configuration by acting as a hub for the three target VPCs, allowing them to share the Direct Connect lines without managing complex VPC peering meshes or multiple private virtual interfaces.

Key Concept

AWS Direct Connect combined with AWS Transit Gateway via a transit virtual interface provides a scalable, highly available, and high-performing hybrid network topology.

Estimated Time:2m 0s

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic