Networking and Content Delivery
CoreAWS Transit Gateway
Regional hub-and-spoke routing for many VPCs, VPNs, and supported hybrid network attachments.
Key points
- Transit Gateway reduces a large peering mesh and centralizes route-domain design.
- Separate route tables can segment attachments; security controls still authorize traffic at workloads and inspection points.
- Attachments and processed traffic add cost dimensions, so small topologies may remain simpler with peering.
Best-known use cases
- Connect many VPCs and data centers through a hub.
- Centralize inspection or routing domains across accounts.
What candidates often confuse it with
- Transit Gateway provides transitive hub routing; VPC peering provides direct non-transitive links.
- Transit Gateway connects networks; PrivateLink exposes a specific service.
Key takeaway
Choose Transit Gateway when topology scale and central routing outweigh direct-peering simplicity.
Related services
- Amazon VPC
- AWS Direct Connect
- AWS Site-to-Site VPN
- AWS Resource Access Manager (AWS RAM)
Relevant exam tasks
- D3.4
- D4.4