AWS Solutions Architect Associate (SAA-C03) · Free practice question 3 of 12
Transit Gateway instead of peering mesh
Marston Group has 25 VPCs in one Region and has connected them with a growing mesh of VPC peering connections. Engineers are frustrated that traffic does not pass from one VPC through a peered VPC to a third VPC, and the number of peering connections is becoming hard to manage. Which solution simplifies connectivity for all VPCs?
- A.Attach all VPCs to an AWS Transit Gateway and use its route tables to control routing
- B.Add more peering connections so every VPC is peered with every other VPC and route through a central VPC
- C.Create a VPN connection between each pair of VPCs
- D.Enable transitive routing on the existing peering connections
Show answer and explanation
Correct answer: A. Attach all VPCs to an AWS Transit Gateway and use its route tables to control routing
Why: A Transit Gateway acts as a regional hub that VPCs attach to once, and its route tables control which attachments can reach each other, replacing a complex peering mesh. VPC peering is non-transitive and has no setting to make it transitive, a full mesh grows quadratically, and per-pair VPNs add even more overhead.
More free AWS Solutions Architect Associate (SAA-C03) questions
- IAM explicit deny overrides allow
- VPC Flow Logs for connectivity troubleshooting
- Scheduled scaling for predictable peaks
- RDS point-in-time restore
- Route 53 geolocation routing
- Data Lifecycle Manager for EBS snapshots
- DynamoDB Streams with Lambda
- Amazon MQ for broker migrations
- Graviton instances for price-performance
- Amazon Inspector vulnerability scanning
- Root user protection best practices