Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 504 discussion

The main difference between AWS Transit Gateway and VPC peering is that AWS Transit Gateway is designed to connect multiple VPCs together in a hub-and-spoke model, while VPC peering is designed to connect two VPCs together in a peer-to-peer model. As we have several VPCs here, the answer should be C.

AWS Transit Gateway is a highly scalable and centralized hub for connecting multiple VPCs, on-premises networks, and remote networks. It simplifies network connectivity by providing a single entry point and reducing the number of connections required. In this scenario, deploying an AWS Transit Gateway in the networking team's AWS account allows for efficient management and control over the network connectivity across multiple VPCs.

A: This option is suggesting hundreds of peering connection for EACH VPC. Nope! B: NAT gateway is for network translation not VPC interconnectivity so this is wrong C: Transit GW + static routes will connect all VPCs https://aws.amazon.com/transit-gateway/ D: VPN gateway is for on-prem to VPN for a VPC. There is no on-prem here so this is wrong

Connect, Monitor and Manage Multiple VPCs in one place = AWS Transit Gateway

C is the most operationally efficient solution for connecting a large number of VPCs across accounts. Using AWS Transit Gateway allows all the VPCs to connect to a central hub without needing to create a mesh of VPC peering connections between each VPC pair. This significantly reduces the operational overhead of managing the network topology as new VPCs are added or changed. The networking team can centrally manage the Transit Gateway routing and share it across accounts using Resource Access Manager.

Answer is C

A transit gateway is a network transit hub that you can use to interconnect your virtual private clouds (VPCs) and on-premises networks. As your cloud infrastructure expands globally, inter-Region peering connects transit gateways together using the AWS Global Infrastructure. Your data is automatically encrypted and never travels over the public internet.

I voted for c