A global delivery company is modernizing its §eet management system. The company has several business units. E

Question

A global delivery company is modernizing its §eet management system. The company has several business units. Each business unit designs and
Maintains applications that are hosted in its own AWS account in separate application VPCs in the same AWS Region. Each business unit's
Applications are designed to get data from a central shared services VPC.
The company wants the network connectivity architecture to provide granular security controls. The architecture also must be able to scale as
More business units consume data from the central shared services VPC in the future.
Which solution will meet these requirements in the MOST secure manner?

Accepted Answer

C. Create VPC endpoint services powered by AWS PrivateLink in the central shared services VPCreate VPC endpoints in each application VPC.

Answer

A. Create a central transit gateway. Create a VPC attachment to each application VPC. Provide full mesh connectivity between all the VPCs by Using the transit gateway.

Answer

B. Create VPC peering connections between the central shared services VPC and each application VPC in each business unit's AWS account.

Answer

D. Create a central transit VPC with a VPN appliance from AWS Marketplace. Create a VPN attachment from each VPC to the transit VPC. Provide full mesh connectivity among all the VPCs.

Q70 — AWS ANS-C01 Ch.1

Correct Answer: C. Create VPC endpoint services powered by AWS PrivateLink in the central shared services VPCreate VPC endpoints in each application VPC.

Explanation