Question

A financial services company operates workloads in three AWS Regions: us-east-1, eu-west-1, and ap-southeast-2. Each Region has 8-12 VPCs that must communicate with VPCs in the same Region and with VPCs in the other two Regions. The company wants a design that minimizes the number of connections to manage, supports centralized routing policies per Region, and provides encrypted traffic between Regions without deploying self-managed VPN appliances. Which design best meets these requirements?

Accepted Answer

Deploy a Transit Gateway in each Region, attach all in-Region VPCs, and establish Transit Gateway inter-Region peering between the three Transit Gateways.

Answer

Create full-mesh VPC peering connections between every VPC across all three Regions and use route tables to steer inter-Region traffic.

Answer

Deploy a single Transit Gateway in us-east-1 and attach all VPCs from all three Regions to it using cross-Region VPC attachments.

Answer

Deploy a Transit Gateway per Region and connect them with Site-to-Site VPN attachments running on customer-managed EC2 VPN instances in each Region.