A global logistics provider has a multi-account AWS environment consisting of spoke VPCs spread across AWS Regions: `us-east-1` and `us-west-2`. The provider must establish a highly available, transitive network topology that connects all VPCs to each other and to an on-premises datacenter over a new AWS Direct Connect connection. The architecture must minimize administrative overhead and scale easily as new VPCs are added. Which of the following actions should the solutions architect take to meet these requirements? (Select TWO.)
- Deploy an AWS Transit Gateway in each Region, attach the local spoke VPCs to their respective Transit Gateway, and configure a Transit Gateway peering connection between the two Transit Gateways.Cevap
- Create a Direct Connect gateway, associate it with the Transit Gateways in both Regions using transit virtual interfaces (transit VIFs) on the Direct Connect connections, and configure BGP to advertise VPC CIDR blocks to the on-premises datacenter.Cevap
- CAssociate a Direct Connect gateway directly with the virtual private gateways attached to each of the spoke VPCs to establish transitive routing between the VPCs and the on-premises datacenter.
- DConfigure a single Route 53 Private Hosted Zone in the primary hub account and associate it only with the hub VPC to enable DNS resolution across all spoke VPCs without additional association steps.
- EDeploy a single NAT Gateway in a centralized transit VPC in `us-east-1` and configure all spoke VPCs in both Regions to route their outbound internet traffic through this NAT Gateway to minimize cost.
Cevap
To meet the requirements, the solutions architect should deploy an AWS Transit Gateway in each Region, attach the local spoke VPCs to their respective Transit Gateway, and configure a Transit Gateway peering connection between them. Additionally, the architect should create a Direct Connect gateway, associate it with the Transit Gateways in both Regions using transit virtual interfaces (transit VIFs) on the Direct Connect connections, and configure BGP to advertise the VPC CIDR blocks.
The correct solution involves deploying an AWS Transit Gateway in each Region to act as a regional hub for the local spoke VPCs and peering them to allow inter-region transitive routing. To connect to the on-premises datacenter, a Direct Connect gateway is associated with the Transit Gateways using transit virtual interfaces (transit VIFs), which allows BGP to advertise routes and enables hybrid connectivity.
Adım Adım Çözüm
Anahtar Kavram
AWS Transit Gateway simplifies multi-VPC and multi-account routing, while Transit Gateway Peering and Direct Connect Gateway with transit VIFs enable highly available, scalable inter-region and hybrid connectivity.