Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 983 discussion

Answer is D

New AWS accounts need consistent, quick, and cost-effective access to these services, so we can't do something for each of these accounts. We should find a way to manage these accounts fast. A - Managing separate DX connections for every account is too much work and DX connections are expensive. B - VPC endpoints are for accessing AWS services, not on-premises services. C - Managing individual VPNs for multiple accounts is too much work and VPNs bring more latency. D - Transit Gateway simplifies the network by acting as a hub for all VPCs and the on-premises network. Instead of multiple DX or VPN connections, you're using one centralized DX connection with Transit Gateway. The best part is that you can easily add new accounts or VPCs without reconfiguring DX or VPN connections.

I will choose Option D for the following reasons: #Least operational overhead: - Using a Transit Gateway centralizes network management, eliminating the need to create separate DX connections or VPNs for each new account, significantly reducing operational overhead. #Scalability: - With a Transit Gateway, you can easily add new accounts to the network without modifying existing configurations, making it ideal for scenarios with frequent account creation. #Cost-effective: - While creating a dedicated DX connection for each account might seem quick, it can become expensive, especially when dealing with a large number of accounts.