Back to Amazon VPC

VPC Peering

5 minutes 5 Questions

VPC Peering enables you to create a network connection between two Amazon Virtual Private Clouds (VPCs) that belong to either the same AWS account or two different accounts. This connection allows instances in both VPCs to communicate with each other as if they were part of the same network. VPC Pe…

Test mode:
Start practice test
AWS Certified Solutions Architect - VPC Peering Example Questions

Test your knowledge of VPC Peering

Question 1

You are designing a hub-and-spoke network on AWS where multiple spoke VPCs need to access a centralized shared services VPC and you want a scalable, centrally managed solution that supports transitive routing and avoids managing many individual peering connections. What is the best approach to ensure smooth communication between the VPCs?

Correct Answer: Use AWS Transit Gateway to provide scalable hub-and-spoke connectivity with transitive routing; attach each VPC to the Transit Gateway and configure appropriate TGW and VPC route tables with non-overlapping CIDRs.

AWS VPC peering is non-transitive, which makes it cumbersome for a hub-and-spoke design with a centralized shared services VPC because each spoke must maintain direct peering to the hub and cannot reach other spokes through the hub. AWS Transit Gateway (TGW) is purpose-built for this: it enables transitive routing between attached VPCs, simplifies management with centralized TGW route tables, scales to thousands of attachments, and integrates with VPN/Direct Connect if needed. To implement, create a TGW, attach each VPC, ensure non-overlapping CIDR blocks, and configure TGW and VPC route tables to direct traffic appropriately. Internet Gateways do not enable private inter-VPC routing, and VPNs are unnecessary for intra-region VPC-to-VPC connectivity. "Nested VPCs" is not an AWS concept.

Question 2

You've been asked to create a VPC peering connection between two VPCs in separate AWS accounts. What would you do to achieve this?

Correct Answer: Create a VPC peering connection and have an owner in one account accept the request from the other account

For VPC peering connections between separate AWS accounts, a VPC owner in one account sends the request, and an owner in the other account accepts the request.

Question 3

You need to monitor and analyze network traffic across AWS VPC peering connections to verify that packets are flowing and to troubleshoot accepted or rejected flows. Which AWS service should you use?

Correct Answer: AWS VPC Flow Logs

AWS VPC Flow Logs captures metadata about IP traffic to and from network interfaces, including traffic that traverses VPC peering connections. This lets you verify that packets are flowing, see accepted versus rejected flows, and troubleshoot connectivity issues. Amazon CloudWatch by itself does not capture network flow data, Amazon CloudFront is a content delivery network unrelated to VPC peering, and Amazon S3 is object storage.

More VPC Peering questions
15 questions (total)
Start 15 question test