A county already has AWS Direct Connect for primary hybrid connectivity and needs failover. The SLA allows a VPN backup. Which design best controls redundancy cost?
Select an answer to reveal the explanation.
Short Explanation
Keep the highway as the main road and the side street as the detour. If the SLA allows VPN failover, you may not need to pay for two full Direct Connect ports.
Full Explanation
Layering a Site-to-Site VPN as backup to Direct Connect is a common cost-aware hybrid redundancy pattern when the SLA accepts VPN failover characteristics. A second DX port can be justified for stricter needs but costs more. Omitting failover entirely risks availability. CloudFront is not a private DX backup circuit.