A large company runs workloads in VPCs that are deployed across hundreds of AWS accounts. Each VPC consists of public subnets and private subnets that span across multiple Availability Zones. NAT gateways are deployed in the public subnets and allow outbound connectivity to the internet from the private subnets. A solutions architect is working on a hub-and-spoke design. All private subnets in the spoke VPCs must route traffic to the internet through an egress VPC. The solutions architect already has deployed a NAT gateway in an egress VPC in a central AWS account. Which set of additional steps should the solutions architect take to meet these requirements?

Question

Accepted Answer

B. Create a transit gateway, and share it with the existing AWS accounts. Attach existing VPCs to

Answer

A. Create peering connections between the egress VPC and the spoke VPCs. Configure the

Answer

C. Create a transit gateway in every account. Attach the NAT gateway to the transit gateways.

Answer

D. Create an AWS PrivateLink connection between the egress VPC and the spoke VPCs. Configure

A large company runs workloads in VPCs that are deployed across hundreds of AWS accounts. Each VPC consists of public subnets and private subnets that span across multiple Availability Zones. NAT…

Question

Options

How the community answered

Explanation

Community Discussion