A large lending company has developed an API to unlock data from a database server and web server. The API has been deployed to Anypoint Virtual…

The scenario requires connecting an API in an Anypoint Virtual Private Cloud (VPC) to two separate private networks. The correct approach uses the specific networking technologies designed for each connection type.

1. Anypoint VPC to Customer's AWS VPC: VPC Peering is the standard, native AWS mechanism to create a private, direct network connection between two VPCs. This allows resources in the Anypoint VPC to communicate with the database server in the customer's AWS VPC as if they were on the same network.

2. Anypoint VPC to On-Premises Data Center: An IPsec VPN tunnel is a secure method to extend the Anypoint VPC and connect it to a remote, on-premises corporate network over the internet. This enables the API to securely access the web server in the corporate data center.

B: VPC Peering is a technology used to connect two VPCs within a cloud provider (like AWS); it cannot be used to connect directly to an on-premises corporate data center.

C: While a transit gateway is a valid AWS networking construct, it represents a more complex hub-and-spoke topology. The most direct and standard methods offered by Anypoint Platform are VPC Peering and VPN, as described in option A.

D: This option incorrectly reverses the technologies. VPC Peering cannot connect to an on-premises data center, and while a VPN could connect two VPCs, peering is the more direct and preferred method.

1. MuleSoft Documentation, "About Anypoint VPC": This document outlines the primary methods for connecting an Anypoint VPC to external private networks. It states, "You can connect your Anypoint VPC to your other AWS VPCs using VPC peering. You can also connect your Anypoint VPC to your on-premises data centers using a secure VPN tunnel or AWS Direct Connect." This directly supports the use of both VPC peering and a VPN tunnel for the scenario described.

Reference: MuleSoft Docs > CloudHub > Networking > About Anypoint VPC.

2. MuleSoft Documentation, "VPC Peering": This section details the process and purpose of VPC peering. It specifies, "VPC peering enables you to connect your Anypoint VPC with one of your own Amazon VPCs." This confirms peering is the correct choice for connecting to the customer's AWS VPC.

Reference: MuleSoft Docs > CloudHub > Networking > VPC Peering.

3. MuleSoft Documentation, "Anypoint VPN": This document explains how to create a secure connection from an Anypoint VPC to a remote network. It clarifies, "Anypoint VPN enables you to connect your MuleSoft Anypoint Virtual Private Cloud (VPC) to your private network, such as an on-premises data center." This validates the use of a VPN for the on-premises connection.

Reference: MuleSoft Docs > CloudHub > Networking > Anypoint VPN.