A company has deployed a multi-VPC environment in the AWS Cloud. The company uses a transit gateway to connect all the VPCs together. In the past, the company has experienced a loss of connectivity between applications after changes to security groups, network ACLs, and route tables in a VPC. When these changes occur, the company wants to automatically verify that connectivity still exists between different resources in a single VPC.
Select one answer.
Marked answer: B
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose B1
B is right
Chose A1
This solution meets the requirement of automatically verifying connectivity between resources in a single VPC after changes to security groups, network ACLs, and route tables. Here's why other options are not suitable:
Chose B3
Verify connectivity within a single VPC. This suggests using VPC Reachability Analyzer, which is designed for analyzing paths between resources in a VPC. React automatically to configuration changes. Changes to security groups, NACLs, and route tables are logged in AWS CloudTrail, so monitoring CloudTrail logs is necessary. Automated path validation. Using a Lambda function to invoke the VPC Reachability Analyzer ensures the process is automated.