What should the solutions architect do to meet these requirements?
Provision an AWS Direct Connect connection to a Region. Provision a VPN connection as a backup if the primary Direct Connect connection fails.
Provision a VPN tunnel connection to a Region for private connectivity. Provision a second VPN tunnel for private connectivity and as a backup if the primary VPN connection fails.
Provision an AWS Direct Connect connection to a Region. Provision a second Direct Connect connection to the same Region as a backup if the primary Direct Connect connection fails.
Provision an AWS Direct Connect connection to a Region. Use the Direct Connect failover attribute from the AWS CLI to automatically create a backup connection if the primary Direct Connect connection fails.
Explanations:
This solution provides a primary Direct Connect connection with a VPN as a backup, balancing high availability, low latency, and cost efficiency for failover.
Two VPN tunnels do not meet the low-latency requirement of the primary connection, as VPN connections are generally slower than Direct Connect.
Although two Direct Connect connections offer high availability, this option does not minimize costs as it incurs higher expenses than using VPN as a backup.
There is no “Direct Connect failover” attribute in AWS CLI to automatically create a backup. This option does not accurately describe AWS capabilities.
From what I’ve seen, the answer is:
Provision an AWS Direct Connect connection to a Region. Provision a VPN connection as a backup if the primary Direct Connect connection fails.