Q56Design Cost-Optimized Architectures
A company runs its core network services, including directory services and DNS, in an on-premises data center. The data center connects to the AWS Cloud through AWS Direct Connect (DX). More AWS accounts are planned and will need fast, cost-effective, and consistent access to these network services. What should a solutions architect implement to satisfy these requirements with the **LEAST** operational overhead?
← → navigate · a answer
Community votes
Discussion · 3
D 7
Answer is D
D 3
New AWS accounts need consistent, quick, and cost-effective access to these services, so we can't do something for each of these accounts. We should find a way to manage these accounts fast.
A - Managing separate DX connections for every account is too much work and DX connections are expensive.
B - VPC endpoints are for accessing AWS services, not on-premises services.
C - Managing individual VPNs for multiple accounts is too much work and VPNs bring more latency.
D - Transit Gateway simplifies the network by acting as a hub for all VPCs and the on-premises network. Instead of multiple DX or VPN connections, you're using one centralized DX connection with Transit Gateway. The best part is that you can easily add new accounts or VPCs without reconfiguring DX or VPN connections.
D 1
I will choose Option D for the following reasons:
#Least operational overhead:
- Using a Transit Gateway centralizes network management, eliminating the need to create separate DX connections or VPNs for each new account, significantly reducing operational overhead.
#Scalability:
- With a Transit Gateway, you can easily add new accounts to the network without modifying existing configurations, making it ideal for scenarios with frequent account creation.
#Cost-effective:
- While creating a dedicated DX connection for each account might seem quick, it can become expensive, especially when dealing with a large number of accounts.