AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company needs to connect several VPCs in the us-east-1 Region that span hundreds of AWS accounts. The company's networking team has its own AWS account to manage the cloud network.
What is the MOST operationally efficient solution to connect the VPCs?
Other
Community
UAnonymous
A
Set up VPC peering connections between each VPC. Update each associated subnet's route table
B
Configure a NAT gateway and an internet gateway in each VPC to connect each VPC through the internet
C
Create an AWS Transit Gateway in the networking team's AWS account. Configure static routes from each VPC.
D
Deploy VPN gateways in each VPC. Create a transit VPC in the networking team's AWS account to connect to each VPC.
Explanation:
Explanation
Correct Answer: C - Create an AWS Transit Gateway in the networking team's AWS account. Configure static routes from each VPC.
Why this is the MOST operationally efficient solution:
- AWS Transit Gateway is specifically designed for this scenario - connecting multiple VPCs across multiple AWS accounts in a hub-and-spoke architecture.
- Operational efficiency: With hundreds of AWS accounts, managing individual VPC peering connections (Option A) would require n*(n-1)/2 connections, which becomes unmanageable at scale.
- Centralized management: The networking team can manage the Transit Gateway from their own AWS account, providing centralized control and visibility.
- Simplified routing: Transit Gateway uses dynamic routing (BGP) rather than requiring manual static route configuration for each connection.
- Cross-account attachment: Transit Gateway supports VPC attachments from other AWS accounts using AWS Resource Access Manager (RAM).
Why other options are less efficient:
- Option A (VPC Peering): Not scalable for hundreds of accounts - would require thousands of peering connections and complex route table management.
- Option B (NAT + Internet Gateway): This would route traffic over the public internet, which is less secure, has higher latency, and incurs data transfer costs.
- Option D (VPN Gateways + Transit VPC): This is an older, more complex solution that has been largely superseded by Transit Gateway. It requires more configuration and management overhead.
Key benefits of Transit Gateway for this scenario:
- Single network hub for all VPCs
- Simplified network management
- Cross-account support via AWS RAM
- Built-in route propagation
- Cost-effective at scale compared to multiple peering connections
- Better security posture than internet-based solutions
Comments
Loading comments...