How should the Solutions Architect design a highly available solution that meets the requirements and is cost-effective?
Establish AWS Direct Connect connections from the company headquarters to all AWS Regions in use. Use the company WAN to send traffic over to the headquarters and then to the respective DX connection to access the data.
Establish two AWS Direct Connect connections from the company headquarters to an AWS Region. Use the company WAN to send traffic over a DX connection. Use inter-region VPC peering to access the data in other AWS Regions.
Establish two AWS Direct Connect connections from the company headquarters to an AWS Region. Use the company WAN to send traffic over a DX connection. Use an AWS transit VPC solution to access data in other AWS Regions.
Establish two AWS Direct Connect connections from the company headquarters to an AWS Region. Use the company WAN to send traffic over a DX connection. Use Direct Connect Gateway to access data in other AWS Regions.
Explanations:
This option requires establishing Direct Connect connections from the headquarters to all AWS Regions, which may lead to higher costs and complexity. Additionally, routing all traffic through the headquarters could introduce latency and a single point of failure.
While this option suggests using inter-region VPC peering to access data in other AWS Regions, it does not leverage Direct Connect Gateway, which is essential for accessing multiple regions from a single connection. Furthermore, it does not provide a highly available and efficient way to access data across all regions.
This option proposes using a transit VPC solution, which is not as efficient as using Direct Connect Gateway. Transit VPC can add complexity and does not offer the best scalability for multi-region access, making it less cost-effective and efficient compared to the correct answer.
This option correctly uses Direct Connect Gateway, which allows access to multiple AWS Regions from a single Direct Connect connection. This design minimizes costs, simplifies architecture, and enhances availability while ensuring that no traffic traverses the public internet, meeting all the requirements set by the Security team.
I estimate that the answer is:
Establish two AWS Direct Connect connections from the company headquarters to an AWS Region. Use the company WAN to send traffic over a DX connection. Use Direct Connect Gateway to access data in other AWS Regions.