QuestionQ170

Network Design

Two companies are undergoing a merger. They have a large AWS footprint with multiple VPCs and are designing connectivity between their AWS networks. Both companies use AWS Direct Connect with a Direct Connect gateway. Each company also has a transit gateway and multiple AWS Site-to-Site VPN connections from its transit gateway to on-premises resources. The new solution must optimize network visibility, throughput, logging, and monitoring.

Which solution will satisfy these requirements?

  • A Configure a Site-to-Site VPN connection between each company's transit gateway to establish reachability between the respective networks. Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use VPC Reachability Analyzer to monitor connectivity.
  • B Configure a Site-to-Site VPN connection between each company's transit gateway to establish reachability between the respective networks. Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use AWS Transit Gateway Network Manager to monitor the transit gateways and their respective connections.
  • C Configure transit gateway peering between each company's transit gateway. Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use VPC Reachability Analyzer to monitor connectivity.
  • D Configure transit gateway peering between each company's transit gateway. Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use AWS Transit Gateway Network Manager to monitor the transit gateways, their respective connections, and the transit gateway peering link.
Explanation

Transit gateway peering natively connects the companies’ transit gateways and supports routing between them, providing a higher-throughput AWS network path than a Site-to-Site VPN connection. VPC Flow Logs published to Amazon CloudWatch Logs provide VPC traffic logging. AWS Transit Gateway Network Manager centrally visualizes and monitors transit gateways, their attachments and connections, and transit gateway peering links; it also exposes topology, health, events, and CloudWatch metrics.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!