You work in the integration team of a company, and your team is integrating the infrastructure with Amazon VPC. You are recently assigned a task to create a VPN connection. You have the AWS management console logging access. The first step that you plan to do is to create a customer gateway in the AWS VPC console. In order to do that, which information do you need? (Select TWO)

Answer options:

A.A Border Gateway Protocol (BGP) Autonomous System Number (ASN) if the routing type is Dynamic.
B.A BGP Autonomous System Number (ASN) if the routing type is static.
C.A dynamic public IP address for the customer gateway device. If the customer gateway is behind a NAT device, use the NAT device`s dynamic public IP address.
D.A static, internet-routable IP address for the customer gateway device.

Correct Answer – A, D
The first step of creating a VPN connection is to set up a customer gateway in the AWS VPC console according to https://docs.aws.amazon.com/vpn/latest/s2svpn/SetUpVPNConnections.html.
Option A is correct: AWS VPN has used BGP ASN to establish the connection for dynamic routing.
Option B is incorrect: For static routing, no BGP ASN is needed.
Option C is incorrect: The internet-routable IP address for the customer gateway device`s external interface is required. And the value must be static.
Option D is correct: Same reason as option
C.