← AWS Certified Solutions Architect Professional - SAP-C02

Free Preview

Question 1 of 5

A large enterprise has 40 AWS accounts organized across 5 business units. Each business unit has its own VPCs in multiple AWS Regions. The network team requires full any-to-any connectivity between all VPCs within the same Region, centralized routing policy enforcement, and the ability to isolate traffic between business units. Which architecture best meets these requirements?

Deploy one AWS Transit Gateway per Region, attach all VPCs, and create a separate Transit Gateway route table per business unit with appropriate association and propagation rules. Establish VPC peering connections between every pair of VPCs across all 40 accounts, and use VPC route tables to enforce routing policy for each business unit. Use AWS PrivateLink endpoint services in each business unit's VPCs to allow inter-VPC communication, and enforce isolation through security group rules. Deploy one AWS Transit Gateway per Region with a single shared route table and use Network ACLs on each VPC subnet to enforce business unit isolation.

This is a free preview. Create an account to access all 380 questions.

Free Preview

We use cookies

Cookie Settings

Essential Cookies Always Active

Analytics Cookies

Advertising Cookies