Question

A company runs a hybrid architecture with a 1 Gbps AWS Direct Connect connection between their on-premises data center and a VPC. The Direct Connect link recently experienced a brief outage, and during that time all connectivity to AWS was lost, disrupting critical applications. The SysOps administrator must add a cost-effective backup path that automatically carries traffic if the Direct Connect connection fails, without requiring manual intervention. Which solution meets these requirements?

Accepted Answer

Provision a Site-to-Site VPN connection as a backup over the public internet and use dynamic (BGP) routing so traffic automatically fails over when Direct Connect is unavailable.

Answer

Order a second Direct Connect connection from the same location and provider to serve as a hot standby that engages when the primary fails.

Answer

Create a VPC peering connection to a second VPC and route on-premises traffic through it if the Direct Connect connection goes down.

Answer

Enable Direct Connect MACsec encryption on the existing connection to improve its availability during outages.