Exam AWS Certified Solutions Architect - Professional topic 1 question 15 discussion

Rolled out A propagating default route would cause conflict. C there cannot be 2 default routes D as the instances has to be in public subnet and should have a single routing table associated with them so B is right answer

A. Configure a single routing table with a default route via the Internet gateway. Propagate a default route via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets. 2 DEFAUTL ROUTES? B. Configure a single routing table with a default route via the Internet gateway. Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets. PERFECT. C. Configure a single routing table with two default routes: on to the Internet via an Internet gateway, the other to the on-premises network via the VPN gateway. Use this routing table across all subnets in the VPC. CAN NOT HAVE 2 DEFAUTL ROUTES. D. Configure two routing tables: on that has a default router via the Internet gateway, and other that has a default route via the VPN gateway. Associate both routing tables with each VPC subnet. ???

B. Configure a single routing table with a default route via the Internet gateway. Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets

Option B: Configure a single routing table with a default route via the Internet gateway. Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets.

B is correct.. D is wrong as we cannot associate more than one rote table to subnet.. one subnet can have only one rote table

A subnet can only be associated with one route table at a time https://docs.aws.amazon.com/vpc/latest/userguide/WorkWithRouteTables.html#AssociateSubnet

B - seems to be matching with requirement D - cannot assign 2 rout tables to a single subnet. a subnet can be associated with a single route table at a time.

keyword = Configure two routing tables

D. Configure two routing tables: on that has a default router via the Internet gateway, and other that has a default route via the VPN gateway. Associate both routing tables with each VPC subnet. This option is the most efficient and scalable way to allow traffic to flow to both the Internet and the on-premises network from all application instances. It does not require any manual configuration of BGP or routing tables.

Option D suggests we configure two routing tables, which provides a clearer separation of routing. One route table is associated with the Internet gateway for Internet-bound traffic, and the other routing table is associated with the VPN gateway for traffic from the on-premises network. This allows for more control and avoids potential conflicts in routing decisions.

B. Use a routing table for the VPC access and BGP for the Direct Connect based access from on-prem.

B. Configure a single routing table with a default route via the Internet gateway. Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets.

B Correct

B is the right answer cause specific routes that identify on prem-net need to be configured to send the traffic to on-prem net via direct connect. C is wrong as default route (0.0.0.0/0) will send all traffic over direct connect even internet traffic

What does A means?

B is Right Answer