A company is designing its network configuration in the AWS Cloud. The company uses AWS Organizations to manage a multi-account setup. The company has three OUs. Each OU contains more than 100 AWS accounts. Each account has a single VPC, and all the VPCs in each OU are in the same AWS Region. The CIDR ranges for all the AWS accounts do not overlap. The company needs to implement a solution in which VPCs in the same OU can communicate with each other but cannot communicate with VPCs in other OUs. Which solution will meet these requirements with the LEAST operational overhead?
Select one answer.
Marked answer: C
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose C1
Transit Gateway per OU provides scalable hub‑and‑spoke connectivity within the OU and default isolation across OUs, with minimal operational overhead. Peering meshes (A/B) don’t scale and are non‑transitive; VPNs with third‑party routing (D) are heavy to operate.
Chose C1
TGW would be used to create hub and spoke. VPCs are in same region so tgw can be shared via RAM. Answer is C
