Examkin

Question

Difficulty: EasyHybrid and Multi-Account Network Connectivity Design

A company has five AWS accounts, each containing a single VPC in the us-east-1 Region. The company needs to establish hybrid connectivity between all five VPCs and their on-premises data center. The solution must minimize administrative complexity and avoid managing a full mesh of connections. Which AWS networking component should the company use as a central hub to connect the VPCs and the on-premises network?

  1. An AWS Transit Gateway to attach to each VPC and route traffic to the on-premises network via a single VPN or Direct Connect connectionAnswer
  2. B
    An AWS Direct Connect Gateway associated directly with the Virtual Private Gateways of all five VPCs to route traffic transitively between the VPCs
  3. C
    A full mesh of VPC Peering connections between all five VPCs, combined with a separate AWS Site-to-Site VPN connection to each individual VPC
  4. D
    A centralized NAT Gateway deployed in a shared egress VPC, routing all hybrid traffic to the on-premises data center over the public internet

Answer

An AWS Transit Gateway to attach to each VPC and route traffic to the on-premises network via a single VPN or Direct Connect connection
The correct answer is the option stating that an AWS Transit Gateway should be used to attach to each VPC and route traffic to the on-premises network. AWS Transit Gateway acts as a central regional router that simplifies the management of hybrid and multi-account VPC connections by avoiding the complexity of a full mesh network.

Step-by-Step Solution

1
Analyze the requirements for connecting multiple VPCs across different accounts to an on-premises network while avoiding a full mesh configuration.
Identify that a hub-and-spoke architecture is required to centralize and simplify the network topology.
This simplifies management and routing compared to point-to-point connections.
2
Evaluate the capabilities of AWS Transit Gateway as a centralized network hub.
AWS Transit Gateway natively supports attaching multiple VPCs across different AWS accounts (via AWS RAM) and connecting them to an on-premises network via a single Direct Connect or VPN.
It acts as a regional router that simplifies transitive routing and centralizes hybrid connectivity.

Key Concept

Hub-and-spoke transit network design using AWS Transit Gateway
Rate this question

Topics

Hybrid and Multi-Account Network Connectivity Design

More questions from this topic