AWS Certified Solutions Architect – Associate (SAA-C03) — Question 433
A solutions architect configured a VPC that has a small range of IP addresses. The number of Amazon EC2 instances that are in the VPC is increasing, and there is an insufficient number of IP addresses for future workloads.
Which solution resolves this issue with the LEAST operational overhead?
Answer options
- A. Add an additional IPv4 CIDR block to increase the number of IP addresses and create additional subnets in the VPC. Create new resources in the new subnets by using the new CIDR.
- B. Create a second VPC with additional subnets. Use a peering connection to connect the second VPC with the first VPC Update the routes and create new resources in the subnets of the second VPC.
- C. Use AWS Transit Gateway to add a transit gateway and connect a second VPC with the first VPUpdate the routes of the transit gateway and VPCs. Create new resources in the subnets of the second VPC.
- D. Create a second VPC. Create a Site-to-Site VPN connection between the first VPC and the second VPC by using a VPN-hosted solution on Amazon EC2 and a virtual private gateway. Update the route between VPCs to the traffic through the VPN. Create new resources in the subnets of the second VPC.
Correct answer: A
Explanation
Expanding the existing VPC by adding a secondary IPv4 CIDR block is the simplest solution because it keeps all resources within the same network boundary without requiring additional routing infrastructure. Options B, C, and D all involve creating a second VPC, which introduces significant operational overhead for managing inter-VPC connectivity via peering, transit gateways, or VPNs. Therefore, keeping a single VPC and expanding its CIDR range is the path of least resistance.