Exam AWS Certified Solutions Architect - Professional topic 1 question 630 discussion

D - https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/centralized-egress-to-internet.html

A would not scale beyond 100 VPN connections to a VPC B would not scale beyond 200 subnets in a single VPC (you can increase the subnet quota beyond 200, but ultimately this doesn't scale because your CIDR and minimum subnet size would limit you at some point) C would not scale beyond the VPC peering limit of 50 (you can increase this to 125, but not beyond that) D would scale the most, but even that is not infinite, you'd have a limit of 5,000 TGW attachments (can be increased), or 10k static routes per TGW (one for each VPC CIDR), or 50Gbps throughput, or the VPN throughput of your firewalls.

I think D "VPN-attached firewalls" should be "VPC-attached firewalls" ? otherwise it makes no sense

D looks better

Agree with D.

I will go with D

Answer is D

It's D with shared transit gateway

DDD ---

I'll go with D

D looks good except "VPN-attached firewalls". What is this? Did they mean VPC attached firewalls?

it's D

I will go with B. https://aws.amazon.com/blogs/networking-and-content-delivery/how-to-use-aws-privatelink-to-secure-and-scale-web-filtering-using-explicit-proxy/. D. how do you route internet traffic thru VPN connected firewall?

going with D transit gateway

D This is *THE* use case for a Transit Gateway. All the other information in answers is a distraction.

I will go with D

D is the correct answer as it is the only scalable option listed.