A company is designing a hybrid network architecture to connect ten VPCs in the us-east-1 region to an on-premises data center. To reduce administrative overhead, the company wants to avoid establishing individual VPN connections or VPC peering connections between all VPCs and the on-premises environment. Additionally, the design must support communication between the VPCs themselves.
Which two AWS networking components should the solutions architect combine to meet these requirements? (Select TWO.)
- AWS Transit Gateway to act as a centralized hub for VPC-to-VPC and hybrid trafficCevap
- An AWS Site-to-Site VPN connection attached to the Transit Gateway to route on-premises traffic through the hubCevap
- CA full mesh of VPC Peering connections between all ten VPCs to enable inter-VPC traffic
- DA Route 53 Private Hosted Zone associated only with a single transit VPC to handle all routing and DNS resolution
Cevap
AWS Transit Gateway to act as a centralized hub for VPC-to-VPC and hybrid traffic, and an AWS Site-to-Site VPN connection attached to the Transit Gateway to route on-premises traffic through the hub
The correct solution combines AWS Transit Gateway and an AWS Site-to-Site VPN connection attached to the Transit Gateway. AWS Transit Gateway acts as a central cloud router that supports transitive routing, enabling the ten VPCs to communicate with one another and with the hybrid connection. Attaching the Site-to-Site VPN to the Transit Gateway allows all connected VPCs to share the same VPN connection to reach the on-premises data center, which minimizes administrative overhead compared to setting up individual VPN tunnels for each VPC.
Adım Adım Çözüm
Anahtar Kavram
AWS Transit Gateway acts as a cloud router to simplify network topology by connecting multiple VPCs and hybrid networks through a single hub, eliminating the need for complex mesh configurations.