A company has set up hybrid connectivity between an on-premises data center and AWS by using AWS Site-to-Site VPN. The company is migrating a workload to AWS. The company sets up a VPC that has two pu

Question

Options

• AUse Amazon CloudWatch Network Monitor to set up Internet Control Message Protocol (ICMP)
• BCreate an Amazon EC2 instance in each subnet. Create a scheduled job to send Internet Control
• CCreate an AWS Lambda function in each subnet. Write a script to perform Internet Control
• DCreate an AWS Batch job in each subnet. Write a script to perform Internet Control Message

• A
  93% (27)
• B
  3% (1)
• D
  3% (1)

Explanation

The requirement is to monitor network metrics such as total packet loss and round-trip time (RTT) between on-premises and AWS over Site-to-Site VPN with minimal operational overhead. AWS CloudWatch Network Monitor (formerly known as VPC Network Manager) provides a managed solution to monitor connectivity, including packet loss and latency, between AWS and on- premises networks. This solution does not require managing any additional infrastructure like EC2 instances or Lambda functions and thus reduces operational overhead significantly. CloudWatch Network Monitor leverages AWS-managed probes and integrates natively with CloudWatch dashboards and alarms, enabling automated, centralized monitoring of network health. This aligns with the AWS Well-Architected Framework's operational excellence pillar by minimizing manual intervention and enabling proactive detection of network issues. Option B, C, and D involve creating custom probes with EC2, Lambda, or Batch jobs, which increases complexity, cost, and maintenance effort. They also require scheduling, script management, and additional monitoring infrastructure.

No community discussion yet for this question.