A company is designing a new AWS environment with a single VPC containing private subnets across two Availability Zones: us-west-2a and us-west-2b. The workloads in the private subnets must access external APIs on the internet for updates. The solutions architect must design a highly available outbound connectivity solution that prevents an outage in one Availability Zone from impacting internet access in the other Availability Zone. Which networking configuration satisfies these requirements?
- Deploy a NAT Gateway in a public subnet in us-west-2a and another NAT Gateway in a public subnet in us-west-2b. Route outbound traffic () from the private subnet in each Availability Zone to the NAT Gateway in the same zone.Cevap
- BDeploy a single NAT Gateway in a public subnet in us-west-2a. Route outbound traffic () from the private subnets in both Availability Zones to this single NAT Gateway.
- CDeploy an AWS Transit Gateway, attach the VPC to the Transit Gateway, and configure the route tables of both private subnets to route outbound traffic () directly to the Transit Gateway without any NAT Gateways.
- DDeploy a single NAT Gateway in a public subnet in us-west-2a. Create a Route 53 Private Hosted Zone for the external API domains and associate it with the VPC to route outbound traffic.
Cevap
Deploy a NAT Gateway in a public subnet in us-west-2a and another NAT Gateway in a public subnet in us-west-2b, and route outbound traffic () from the private subnet in each Availability Zone to the NAT Gateway in the same zone.
To prevent an outage in one Availability Zone from impacting internet access in another, the architecture must avoid cross-AZ network dependencies. Deploying a NAT Gateway in each Availability Zone and configuring the respective private subnet route tables to use the NAT Gateway in the same zone ensures high availability and isolates failures to a single zone.
Adım Adım Çözüm
Anahtar Kavram
Availability Zone Redundancy for Outbound NAT Traffic
Tahmini Süre:1m 0s