How should the SysOps Administrator connect the two VPCs while meeting the compliance requirements?
Configure EC2 instances to act as VPN appliances, then configure route tables.
Configure inter-region VPC peering between the two VPCs, then configure route tables.
Configure NAT gateways in both VPCs, then configure route tables.
Configure an internet gateway in each VPC, and use these as the targets for the VPC route tables.
Explanations:
Configuring EC2 instances as VPN appliances is not a scalable or secure solution. VPN connections may expose data to the public internet unless specifically configured with encryption and private connectivity.
Inter-region VPC peering allows private connectivity between the VPCs, and traffic between regions stays within the AWS network, meeting the encryption and compliance requirements.
NAT gateways are designed for outbound internet access from private subnets and do not meet the requirement for secure, private, inter-region connectivity.
Internet gateways would expose traffic to the public internet, violating the compliance requirement of not traversing the public internet.