A software company runs resources across multiple AWS accounts and Regions. The application VPC (us-east-1) has CIDR 10.10.0.0/16. A shared-services VPC in a different account in us-east-2 uses CIDR 10.10.10.0/24. A CloudFormation attempt to create a VPC peering between the application VPC and the shared-services VPC failed. Which factors could cause the peering failure? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: The IPv4 CIDR blocks of the two VPCs overlap., The IAM role in the accepter account does not have the required permissions..
Why this is the answer
VPC peering connections cannot be established between VPCs with overlapping IPv4 CIDR blocks. In this scenario, the application VPC (10.10.0.0/16) and the shared-services VPC (10.10.10.0/24) have overlapping CIDRs, which is a direct cause of the failure. Additionally, establishing a cross-account VPC peering connection requires proper IAM permissions. The IAM role in the accepter account (the account receiving the peering request) must have permissions to accept the connection. If these permissions are missing, the CloudFormation stack will fail. VPC peering connections can span different AWS Regions, so "The VPCs are not in the same Region" is incorrect. Internet gateways are not required for VPC peering itself, so "One or both accounts lack access to an Internet gateway" is incorrect. AWS Resource Access Manager (RAM) is used for sharing resources like subnets, not for establishing VPC peering connections directly, making "One VPC was not shared through AWS Resource Access Manager (RAM)" incorrect.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed