You have a MySQL cluster that is hosted in AWS. The nodes in the cluster currently work with private IP addresses. There is a self-referencing security group that is used for securing access across the nodes of the cluster. There is now requirement to ensure that disaster recovery is in place for these nodes in another AWS region with database replication to it with only private access being enabled. How can you achieve communication across the nodes between different AWS regions securely?

Answer options:

A.Use public IP addresses and use SSL certificates for secure communication across the nodes.
B.Use the private IP addresses of the nodes and use SSL certificates for secure communication across the nodes.
C.Create a VPN IPSec tunnel. Ensure the nodes in the different region reference the security groups assigned to the nodes in the primary region.
D.Create a VPN IPSec tunnel. Ensure the nodes in the different region reference the VPC CIDR block in their security groups.

Answer – D
You need to use a VPN IPSec tunnel for secure communication across the Internet between the regions.
Option A is invalid because public IP addresses via the Internet is not a secure way for communication
Option B is invalid because private IP addresses are not routable via the Internet.
Option C is invalid because the same security groups cannot be accessed across regions.
For more information on VPN connections, please refer to the below URL
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpn-connections.html