Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 232 discussion

Traffic from the spoke VPC is first directed to the GWLB endpoint (which resides in the spoke VPC) via route table configurations

Option A: 1. An application in a spoke VPC sends traffic to the GWLB endpoint based on the VPC route table configuration. 2. Traffic is delivered securely and privately to the GWLB. 3. The GWLB sends the traffic to a virtual appliance for inspection. 4. Return traffic flows back to the GWLB endpoint and out to the internet through the internet gateway. • Step 1: Correct. The spoke VPC route table points default (or other relevant prefixes) to the GWLB endpoint. • Step 2: Correct. The GWLB endpoint is an interface endpoint that privately and securely forwards packets to the GWLB in the appliance VPC. • Step 3: Correct. The GWLB passes traffic to the attached virtual appliance (e.g., a firewall) for inspection. • Step 4: Correct. After inspection, the traffic returns to the spoke VPC through the GWLB endpoint and finally exits via the spoke VPC’s internet gateway.