A retail logistics company is migrating its legacy inventory management servers from an on-premises data center to AWS using AWS Application Migration Service (MGN). The on-premises environment is connected to AWS via an AWS Direct Connect connection terminated at an AWS Transit Gateway. The migration team has configured the replication settings in AWS MGN to use the private IP addresses of the replication servers in the staging area VPC to ensure traffic does not traverse the public internet. However, after installing the replication agent on the source servers, the replication status remains in a disconnected state and no data is being transferred.
Which of the following configuration actions is required to resolve this connectivity issue and allow data replication to begin?
- Configure the on-premises firewalls to allow outbound traffic to the replication staging area subnet CIDR block on TCP port 1500, and ensure the security group attached to the replication servers in the staging VPC allows inbound traffic from the on-premises subnet range on TCP port 1500.Answer
- BCreate a new Transit Gateway route table to establish direct transitive routing between the staging VPC and the target production VPCs, and associate a Direct Connect Gateway directly to the staging VPC to route replication traffic.
- CAssociate the Route 53 Private Hosted Zone created for the MGN interface VPC endpoints with the replication staging VPC, and configure the on-premises DNS servers to forward queries for the MGN API to Route 53 resolver endpoints.
- DDeploy redundant NAT Gateways across multiple Availability Zones in the replication staging VPC, and configure the route tables associated with the replication staging subnets to route all outbound replication traffic to the internet.