Question

A network engineer is assessing a network configuration for a global retail company. The company has an AWS Direct Connect connection between its on-premises data center and the AWS Cloud. It has AWS resources in the eu-west-2 Region, consisting of multiple VPCs attached to a transit gateway. The company recently provisioned several AWS resources in the eu-central-1 Region in a single VPC near its users in that area. The network engineer must connect the eu-central-1 resources to the on-premises data center and to the eu-west-2 resources. The solution must minimize changes to the Direct Connect connection. What should the network engineer do to meet these requirements?

Accepted Answer

B. Create a new transit gateway in eu-central-1. Create a peering attachment request to the transit gateway in eu-west-2. Add a static route in the transit gateway route table in eu-central-1 to point to the transit gateway peering attachment. Accept the peering request. Add a static route in the transit gateway route table in eu-west-2 to point to the new transit gateway peering attachment.

Answer

Create a new virtual private gateway. Attach the new virtual private gateway to the VPC in eu-central-1. Use a transit VIF to connect the VPC and the Direct Connect router.

Answer

Create a new transit gateway in eu-central-1. Use an AWS Site-to-Site VPN connection to peer both transit gateways. Add a static route in the transit gateway route table in eu-central-1 to point to the transit gateway VPN attachment. Add a static route in the transit gateway route table in eu-west-2 to point to the new transit gateway peering attachment.

Answer

Create a new virtual private gateway. Attach the new virtual private gateway to the VPC in eu-central-1. Use a public VIF to connect the VPC and the Direct Connect router.