Question

A company runs its application tier in VPC-A and a shared analytics service in VPC-B, both in the same cloud region. The teams need the application servers to communicate with the analytics service using private IP addresses, with low latency and no traffic traversing the public internet. There is no requirement for VPC-A to reach any networks that are connected to VPC-B. Which design most efficiently meets this need?

Accepted Answer

Establish a VPC peering connection between VPC-A and VPC-B and update route tables in each VPC

Answer

Deploy a NAT gateway in each VPC and route traffic between them through public IP addresses

Answer

Configure a site-to-site VPN tunnel between the two VPCs over the internet

Answer

Attach an internet gateway to both VPCs and use security groups to restrict source addresses