AWS Certified Advanced Networking - Specialty
Get started today
Ultimate access to all questions.
A company is implementing AWS Cloud WAN with edge locations in the us-east-1 and ap-southeast-2 Regions. Separate AWS Cloud WAN segments are set up for the development, production, and shared services environments at each edge location. Multiple new VPCs will be deployed for these environments and attached to the AWS Cloud WAN core network.
The network team aims to ensure that VPC attachments are assigned to the correct segment. They plan to tag VPC attachments using the Environment key, with values corresponding to the respective environment segment names. The production environment segment in us-east-1 must mandate acceptance for attachment requests, while all other attachment requests should not require acceptance.
What solution fulfills these requirements?
A company is implementing AWS Cloud WAN with edge locations in the us-east-1 and ap-southeast-2 Regions. Separate AWS Cloud WAN segments are set up for the development, production, and shared services environments at each edge location. Multiple new VPCs will be deployed for these environments and attached to the AWS Cloud WAN core network.
The network team aims to ensure that VPC attachments are assigned to the correct segment. They plan to tag VPC attachments using the Environment key, with values corresponding to the respective environment segment names. The production environment segment in us-east-1 must mandate acceptance for attachment requests, while all other attachment requests should not require acceptance.
What solution fulfills these requirements?
Explanation:
The question requires configuring AWS Cloud WAN to ensure VPC attachments are correctly segmented and that the production environment in us-east-1 requires acceptance for attachment requests, while others do not. The correct approach involves creating two rules: one that requires acceptance for the production segment in us-east-1 and another that does not require acceptance for all other segments. The rule for the production segment must use 'and' logic to ensure both conditions (tag:Environment value of Production and Region value of us-east-1) are met. This ensures that only VPC attachments tagged for the production environment in the us-east-1 region require acceptance. The second rule should handle all other environments without requiring acceptance, ensuring they are mapped to their respective segments based on the tag:Environment value. Therefore, the correct solution is to create a rule with a number of 100 that requires acceptance for attachments to the production segment using 'and' logic for the conditions, and a rule with a number of 200 that does not require acceptance for all other tag:Environment values.