CloudGuild · Blog · Cheat sheets · Lessons · Certifications
AWS Certified Solutions Architect - Associate (SAA-C03) Exam Question Walkthrough
Explore an AWS exam question on network segmentation and discover why the right choice minimizes management overhead.
A startup is looking for a way to implement network segmentation within their AWS environment while minimizing management overhead. This decision often trips candidates up because it requires balancing functionality with manageability.
The question
A startup is looking for a way to implement network segmentation within their AWS environment while minimizing management overhead. Which feature should they use to achieve this?
A. AWS Security Groups
B. AWS Network ACLs
C. AWS PrivateLink
D. AWS Transit Gateway
Think before you scroll
Consider how each option impacts network segmentation and management overhead. Look for a solution that simplifies connections without complicating management tasks.
The answer
The correct option is D. AWS Transit Gateway. It allows for simplified network segmentation and connection between multiple VPCs and on-premises networks. This significantly reduces management overhead compared to manually managing multiple peering connections.
Why the other options lose
A. AWS Security Groups: While Security Groups provide a way to control inbound and outbound traffic at the instance level, they do not facilitate network segmentation across multiple VPCs or on-premises networks. This makes them less suitable for the startup's needs.
B. AWS Network ACLs: Network ACLs operate at the subnet level and provide a stateless way to control traffic. However, they lack the scalability and ease of management that Transit Gateway offers for complex architectures.
C. AWS PrivateLink: PrivateLink allows for private connectivity to services across VPCs securely. However, it does not inherently provide the segmentation and management capabilities needed for the startup's scenario.
The concept behind it
AWS Transit Gateway serves as a central hub for connecting VPCs and on-premises networks. It simplifies routing and reduces the complexity associated with managing multiple peering connections. Understanding how Transit Gateway operates can help in similar scenarios where you need to connect multiple networks efficiently.
Exam trap to remember
Remember: for network segmentation with minimal management overhead, AWS Transit Gateway is the go-to solution over more limited options.