AWS Certified Solutions Architect – Associate (SAA-C03) — Question 791

A company needs a secure connection between its on-premises environment and AWS. This connection does not need high bandwidth and will handle a small amount of traffic. The connection should be set up quickly.

What is the MOST cost-effective method to establish this type of connection?

Answer options

• A. Implement a client VPN.
• B. Implement AWS Direct Connect.
• C. Implement a bastion host on Amazon EC2.
• D. Implement an AWS Site-to-Site VPN connection.

Correct answer: D

Explanation

AWS Site-to-Site VPN is the most cost-effective and rapid solution for securely connecting an entire on-premises network to AWS when high bandwidth is not required. AWS Direct Connect provides high bandwidth but is expensive and takes a long time to set up. AWS Client VPN is designed for individual remote devices rather than network-to-network connections, and a bastion host is used only for administrative access to EC2 instances, not for general site connectivity.