Which solution will meet these requirements?
Set up an AWS Site-to-Site VPN connection between the data center and one VPC. Create a VPC peering connection between the VPCs.
Set up an AWS Site-to-Site VPN connection between the data center and each VPC. Create a VPC peering connection between the VPCs.
Set up an AWS Direct Connect connection between the data center and one VPC. Create a VPC peering connection between the VPCs.
Create a transit gateway. Attach both VPCs to the transit gateway. Create an AWS Site-to-Site VPN tunnel to the transit gateway.
Explanations:
A Site-to-Site VPN connection to only one VPC limits connectivity to that VPC, and does not provide the required redundancy or performance for both VPCs. VPC peering alone does not provide connectivity to the on-premises data center.
While establishing a Site-to-Site VPN connection to each VPC provides connectivity, it does not effectively enable communication between the two VPCs unless they are peered, which can lead to complexity and potential bandwidth limitations. Additionally, managing multiple VPN connections can complicate the architecture.
A Direct Connect connection to only one VPC does not meet the requirement for connectivity to both VPCs. Furthermore, Direct Connect does not inherently support VPC peering without additional setup, and it does not provide the required connectivity to the data center for both VPCs.
Creating a transit gateway allows both VPCs to communicate with each other and provides a single connection point for the data center via a Site-to-Site VPN tunnel. This setup can handle the required bandwidth of 600 Mbps and simplifies management while providing reliable connectivity across multiple VPCs.
I structure that the answer is:
Create a transit gateway. Attach both VPCs to the transit gateway. Create an AWS Site-to-Site VPN tunnel to the transit gateway.