A publisher keeps a replica of a VPC in a second AWS region. The campus must still reach the replica if the first region is lost. What provides that survival?
Select an answer to reveal the explanation.
Short Explanation
A spare lane into the same building does not help when the building is gone. You add a VPN into the second region, where the replica lives. The other tunnel of the first-region connection dies with that region, and a longer IKE lifetime does not create a second region.
Full Explanation
Availability inside one AWS VPN connection is the pair of tunnels into that region's endpoint. Losing the region takes both tunnels and the VPC with them. The replica is useful only if the campus has a path into the second region, such as its own VPN connection there, and a way to select it when the first region is gone. The second tunnel of the first connection is not that path. A longer IKE lifetime changes rekey timing on the surviving session and does not open a region that was never connected. A second static route toward the same outside address is still the first region. Exam caveat: the replica has to be ready to accept the workload. A VPN into an empty region does not restore the application. Operational check: shut the first-region connection and confirm the campus installs the replica prefixes through the second-region neighbor.