An ecommerce company runs several internal applications in multiple AWS accounts. The company uses AWS Organizations to manage its AWS accounts. A security appliance in the company's networking…

Question

Options

• ADeploy a Network Load Balancer (NLB) in the networking account to send traffic to the security
• BDeploy an Application Load Balancer (ALB) in the application accounts to send traffic directly to
• CDeploy a Gateway Load Balancer (GWLB) in the networking account to send traffic to the security
• DDeploy an interface VPC endpoint in the application accounts to send traffic directly to the

• A
  12% (4)
• B
  3% (1)
• C
  79% (26)
• D
  6% (2)

Explanation

TheGateway Load Balancer (GWLB)is specifically designed to route traffic through a security appliance in a hub-and-spoke model, making it the ideal solution for inspecting traffic between multiple AWS accounts. GWLB enables you to simplify, scale, and deploy third-party virtual appliances transparently, and it can work across multiple VPCs or accounts using interface endpoints (Gateway Load Balancer Endpoints). Key AWS features: Traffic Inspection: The GWLB allows the centralized security appliance to inspect traffic between different VPCs, making it suitable for inspecting inter-account interactions. Interface VPC Endpoints: By using interface endpoints in the application accounts, traffic can securely and efficiently be routed to the security appliance in the networking account. AWS Documentation: The use of GWLB aligns with AWS's best practices for centralized network security, simplifying architecture and reducing operational complexity.

No community discussion yet for this question.