Soru

An enterprise is designing a highly available, multi-Region hybrid network architecture for its AWS Organizations environment. Spoke VPCs in the `$eu-west-1$` (Ireland) and `$eu-central-1$` (Frankfurt) Regions are connected via local regional AWS Transit Gateways (TGWs) that are peered with one another. The on-premises network spans two main hubs: London (primary for `$eu-west-1$`) and Frankfurt (primary for `$eu-central-1$`), utilizing the aggregated corporate network range of `$10.0.0.0/8$`. The London data center connects to the `$eu-west-1$` TGW using a `$10$ Gbps AWS Direct Connect (DX) connection via a shared DX Gateway, and has a backup Site-to-Site VPN attachment directly on the `$eu-west-1$` TGW. The Frankfurt data center is configured similarly with a DX and VPN connection to the `$eu-central-1$` TGW. The network design requires that outbound traffic from `$eu-west-1$` to `$10.0.0.0/8$` prefers the London DX as the primary path, fails over to the local London VPN as the secondary path, and only routes over the peered TGW connection to egress via the Frankfurt data center paths if both London connections are offline. Which routing configuration achieves this design while preventing sub-optimal routing under normal conditions?