AWS Certified Cloud Practitioner / Question #1046 of 719

Question #1046

Which AWS services enable the establishment of a private network connection between VPCs located in separate AWS regions? (Choose two.)

A

VPC endpoints

B

Amazon Route 53

C

VPC peering

D

AWS Direct Connect

E

AWS Transit Gateway

Explanation

The correct answers are C (VPC peering) and E (AWS Transit Gateway).

- VPC Peering (C): Allows direct private connectivity between VPCs, including those in different AWS regions (inter-region VPC peering). Traffic stays within the AWS network and does not traverse the public internet.
- AWS Transit Gateway (E): Supports inter-region peering, enabling VPCs attached to Transit Gateways in separate regions to communicate privately.

Why other options are incorrect:
- A (VPC endpoints): Connects a VPC to AWS services privately, not VPC-to-VPC.
- B (Route 53): A DNS service for routing traffic but does not establish private network connections.
- D (Direct Connect): Establishes dedicated connections from on-premises to AWS, not directly between VPCs across regions.

Key Points:
- Use inter-region VPC peering for direct VPC-to-VPC connections across regions.
- Use Transit Gateway inter-region peering for scalable multi-region architectures involving multiple VPCs.

Answer

The correct answer is: CE