Question

A company operates 12 separate VPCs across development, staging, and production environments. Each VPC needs to communicate with every other VPC, and all VPCs must share a common on-premises connection over a single VPN. The network team is struggling to manage the growing mesh of individual VPC peering connections and duplicate VPN tunnels. Which design should the cloud architect recommend to simplify and centralize this connectivity?

Accepted Answer

Deploy a transit gateway (cloud router hub) and attach all 12 VPCs and the on-premises VPN to it for centralized any-to-any routing

Answer

Create a full mesh of VPC peering connections between all 12 VPCs and add a separate VPN tunnel per VPC

Answer

Consolidate all workloads into a single large VPC with multiple subnets to eliminate cross-VPC routing

Answer

Place a NAT gateway in each VPC to route traffic between VPCs and to the on-premises network