Question

A company runs production workloads in two AWS Regions, us-east-1 and eu-west-1, each with a Transit Gateway attached to multiple VPCs. The networking team must enable communication between VPCs in the two Regions. Requirements: traffic between the Regions must traverse the AWS global backbone (not the public internet), be encrypted in transit automatically, and support routing between the two Transit Gateways without deploying additional appliances or VPN instances. Which implementation meets all requirements?

Accepted Answer

Create a Transit Gateway peering attachment between the two Transit Gateways and add static routes in each TGW route table pointing to the peer Region's CIDRs.

Answer

Establish a Site-to-Site VPN over the internet between the two Transit Gateways and enable BGP for dynamic route propagation.

Answer

Create a VPC peering connection between one VPC in each Region and rely on Transit Gateway to route traffic transitively across the peering.

Answer

Deploy a Direct Connect gateway in each Region and associate both Transit Gateways to share routes across the Regions.