Your company has set up a VPN connection between their on-premises infrastructure and AWS. They have multiple VPCs defined with inter-communication between the VPCs being enabled. They also need to ensure that all traffic flows through a transit VPC from their on-premises infrastructure. How would you architect the solution? Choose 2 answers from the options given below.

Answer options:

A.Create a VPN connection between the on-premises environment and the transit VPC.B.Create a VPN connection between the On-premises environment to all other VPCs.
C.Create a VPN connection between the transit VPC to all other VPCs.
D.Create a VPC peering connection between the transit VPC and all other VPCs.

Answer – A and C
This is a design that incorporates a transit VPC. The below diagram from the AWS documentation demonstrates this.
Option B is incorrect since this would go against the concept of the Transit VPC.Option D is incorrect since transitive routing is not possible across peering connections from a VPN connection.
For more information on the transit VPC, one can visit the below URL
https://docs.aws.amazon.com/aws-technical-content/latest/aws-vpc-connectivity-options/transit-vpc.html