A media firm has created Sales VPC, Marketing VPC & Media VPC. Media VPC has many servers hosting large size media content uploaded from an on-premises office. Users from on-premises offices also need to have access to Sales VPC & Marketing VPC. Servers in Marketing VPC download media content from Media VPC on a regular basis to create modified content for external clients. Sales VPC should be isolated from Media VPC & Marketing VPC with only need basis specific subnets to access these VPCs. The firm is looking for a cost-effective, scalable solution to be deployed.
As an AWS Architect, which of the following will you suggest implementing to meet the requirement? 

Answer options:

A.Create Private VIF over AWS Direct Connect Gateway to Media VPC. Create full mesh VPC peering between Sales, Marketing & Media VPC. Create a VPN connection from on-premises to each of the VPC for communication between on-premises users & each of the three VPC.B.Create Transit VIF over AWS Direct Connect Gateway to connect to Transit Gateway which will have an association with specific subnets from all three VPC. Create a VPC peering between Marketing VPC & Media VPC.C.Create Private VIF over AWS Direct Connect Gateway to Media VPC. Create Transit VIF over another AWS Direct Connect Gateway to connect to Transit Gateway which will have an association with specific subnets from all three VPC. Create a VPC peering between Marketing VPC & Media VPC.D.Create Transit VIF over AWS Direct Connect Gateway to connect to Transit Gateway which will have an association with specific subnets from all three VPC. Create a full mesh VPC peering between Sales, Marketing & Media VPC.

Correct Answer – C
From On-premise to Media VPC, large size videos files need to be uploaded so Private VIF over AWS Direct Connect Gateway would provide dedicated bandwidth & minimize cost as compared to having connectivity via Transit gateway. To limit traffic flowing via Transit Gateway for servers between Marketing VPC & Media VPC, VPC peering can be implemented without hourly connection charges as in Transit Gateway. For specific IP communication between Sales, Marketing & Media VPC & with on-premise users, a transit Gateway can be deployed.
Option A is incorrect as creating VPC peering between all three VPC will allow Sales VPC full access to the other two VPC. Also, creating a separate VPN from on-premises to each of three VPC will be a costly & non-scalable solution.
Option B is incorrect as using Transit Gateway for heavy traffic between on-premises to Media VPC will incur a huge cost compared to having Private VIF connectivity from AWS Direct Connect gateway to Media VPC.Option D is incorrect as using Transit Gateway for heavy traffic between on-premises to Media VPC will incur a huge cost compared to having Private VIF connectivity from AWS Direct Connect gateway to Media VPC. Also, with full mesh VPC peering, it would be a non-scalable solution.
For more information on Hybrid Connectivity, refer to the following URL
https://d1.awsstatic.com/whitepapers/building-a-scalable-and-secure-multi-vpc-aws-network-infrastructure.pdf