A company runs internal applications across multiple AWS accounts under AWS Organizations. A security appliance in the networking account must inspect inter-account application traffic. Which solution meets this requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: Deploy a Gateway Load Balancer (GWLB) in the networking account to send traffic to the security appliance. Configure the application accounts to send traffic to the GWLB by using an interface GWLB endpoint in the application accounts..
Why this is the answer
A Gateway Load Balancer (GWLB) is specifically designed for deploying, scaling, and managing third-party virtual appliances such as firewalls, intrusion detection systems, and deep packet inspection systems. By deploying the GWLB in the networking account and configuring interface GWLB endpoints in the application accounts, traffic can be transparently routed through the security appliance for inspection before reaching its destination. This centralized inspection model is ideal for AWS Organizations with multiple accounts. Incorrect options: NLB and ALB are not designed for transparent insertion of security appliances for inter-VPC traffic inspection. Deploying an interface VPC endpoint directly to the security appliance would require the security appliance to be a service within a VPC endpoint service, which is not the primary use case for transparent traffic inspection across accounts.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed