Question

A retail company is deploying a new branch-heavy architecture and wants to connect 30 branch sites to workloads running across multiple VPCs in a single AWS region. The networking team requires internet-based connectivity (no dedicated circuit budget), centralized route management across all VPCs, and encrypted transport. Which AWS connectivity approach best meets these requirements?

Accepted Answer

Terminate IPsec VPN connections on an AWS Transit Gateway and attach the VPCs to the Transit Gateway for centralized routing

Answer

Establish individual IPsec site-to-site VPN tunnels from each branch directly to a Virtual Private Gateway (VGW) attached to every VPC

Answer

Provision AWS Direct Connect with a private virtual interface to each VPC and encrypt with MACsec

Answer

Use AWS PrivateLink endpoints to expose each VPC service to the branch sites over the internet