You are working for a global software firm having offices in various continents. The pre-sales team needs to provide a new application demo to a prospective customer. For this, they are looking urgently for a separate temporary connection between 3 on-premises regional offices at Sydney, London, and Tokyo & Demo VPC at the us-west-1 region.
You are planning to set up a VPN CloudHub in VGW (Virtual Private Gateway) at us-west-1 for the other three on-premise sites to connect. What are the factors required to meet this connectivity solution? (SELECT TWO)

Answer options:

A.VGW at us-west-1 should be enabled to advertise IP prefixes of each regional office to other regional offices.
B.Non-overlapping IP address pool should be configured at each of the regional offices.
C.Each router should have a BGP (Border Gateway Protocol) peering with other routers at each regional office over VPN connection.
D.BGP (Border Gateway Protocol) ASN (Autonomous System Number) should be unique at these regional offices.
E.Each of these offices should set up VPN connection to VGW only in that specific region instead of to VGW at us-west-1.

Correct Answers – B, D
AWS VPN CloudHub provides connectivity between spoke location over VPN connection. In this case, VGW acts as a Hub & re-advertise prefixes received from one regional office to another regional office. For this connectivity to establish, each regional site should have non-overlapping IP prefixes & BGP ASN unique at each site. If BGP ASN is not unique, additional ALLOWS-IN will be required.
Option A is incorrect as VGW by default acts as a Hub and spoke & no additional configuration needs to be done at the VGW end.
Option C is incorrect as the router needs to have BGP peering only with VGW & not with routers in other locations.
Option E is incorrect as a regional office can set up a VPN connection to VGW of the different regions.
For more information on using AWS VPN CloudHub, refer to the following URL-
https://docs.aws.amazon.com/vpn/latest/s2svpn/VPN_CloudHub.html