AmazonAmazon Advanced Networking Specialty ANS-C01 Certification·EN·Updated 3 Aug 2026
An organization runs a highly available application across multiple VPCs and two on-premises data centers. All VPCs are in the same AWS Region and must be able to exchange large file transfers (multiple gigabytes) with each other and with the on-premises data centers. You must design an AWS Direct Connect solution that connects the on-premises data centers to each VPC while minimizing operational overhead. Which architecture satisfies the requirements with the least operational effort?
Choose an answer
Tap an option to check your answer.
Correct answer: Deploy a Transit Gateway in the same Region as the VPCs. Attach each VPC to the Transit Gateway. Create a Direct Connect gateway and associate it with the Transit Gateway. Create a new transit VIF for each Direct Connect connection and configure the transit VIF to exchange BGP routes and use an MTU of 8500. Enable route propagation between each VPC and the Transit Gateway..
Why this is the answer
The correct option uses a Transit Gateway, which simplifies network architecture by centralizing connectivity between multiple VPCs and on-premises networks. Associating the Direct Connect gateway with the Transit Gateway allows all attached VPCs to communicate with on-premises resources over a single connection, minimizing operational overhead compared to individual VIFs per VPC. Using a transit VIF is specifically designed for Transit Gateway connectivity. An MTU of 8500 is the maximum supported for a transit VIF on a Direct Connect connection, optimizing large file transfers. Route propagation ensures dynamic routing updates.
Incorrect options involving private VIFs per VPC or VPC peering for inter-VPC communication would significantly increase operational complexity and management overhead as the number of VPCs grows. The MTU of 9001 is not supported for Direct Connect transit VIFs.