Question

Difficulty: EasyHybrid and Multi-Account Network Connectivity Design

A company wants to connect multiple AWS VPCs to their on-premises data center using a hub-and-spoke topology with AWS Transit Gateway. Which of the following components or configurations are required to establish this network connectivity? (Select TWO).

  1. Transit Gateway attachments created for each VPC to connect them to the Transit Gateway.Answer
  2. A Transit Gateway attachment to a VPN connection or Direct Connect gateway to establish the hybrid link to the on-premises network.Answer
  3. C
    A full mesh of VPC peering connections between all VPCs to enable transit routing between the VPCs and the Transit Gateway.
  4. D
    Route 53 Private Hosted Zone associations across all VPCs to handle IP-level routing between the VPCs and the Transit Gateway.

Answer

Transit Gateway attachments created for each VPC to connect them to the Transit Gateway, and a Transit Gateway attachment to a VPN connection or Direct Connect gateway to establish the hybrid link to the on-premises network.
Establishing a hub-and-spoke hybrid network with Transit Gateway requires attaching the spoke VPCs directly to the Transit Gateway, and establishing a hybrid connectivity attachment (such as VPN or Direct Connect) to bridge the Transit Gateway to the on-premises data center.

Step-by-Step Solution

1
Identify the requirement for connecting spoke VPCs to the central hub.
Create Transit Gateway VPC attachments for each spoke VPC.
VPC attachments enable the Transit Gateway to act as a router for the VPC resources.
2
Identify the requirement for connecting the central hub to the on-premises network.
Create a hybrid attachment, such as an AWS Site-to-Site VPN attachment or a Direct Connect gateway attachment on the Transit Gateway.
This establishes physical or virtual encrypted tunnels between AWS and the on-premises customer gateway.

Key Concept

AWS Transit Gateway acts as a cloud router to simplify hybrid and multi-account hub-and-spoke networking by using attachments to connect VPCs and hybrid paths.
Rate this question