What should a solutions architect implement to meet these requirements with the LEAST amount of operational overhead?
Create a DX connection in each new account. Route the network traffic to the on-premises servers.
Configure VPC endpoints in the DX VPC for all required services. Route the network traffic to the on-premises servers.
Create a VPN connection between each new account and the DX VPRoute the network traffic to the on-premises servers.
Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.
Explanations:
Creating a DX connection in each new account would require significant operational overhead, as each account would need to manage its own DX connection, leading to redundancy and complexity in routing.
While VPC endpoints can provide access to certain AWS services privately, they do not facilitate direct connectivity to on-premises services like directory services and DNS. Therefore, this option does not meet the requirement.
Setting up a VPN connection for each new account would create additional operational overhead. Managing multiple VPNs can be complex and does not provide a scalable or cost-effective solution compared to other options.
Configuring AWS Transit Gateway allows for efficient routing of traffic between multiple accounts and the on-premises network through a single DX connection. This approach minimizes operational overhead by centralizing network management and facilitating seamless acc
I sort that the answer is:
Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.
As I see it, the answer is:
Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.