Examkin

Question

Difficulty: MediumAWS Network Services

A retail company has internal business applications running on Amazon EC2 instances located in a private subnet of a VPC. These applications must regularly download large datasets from an object storage service and write the processed results back. The network traffic must remain entirely within the AWS network to ensure security and avoid data transfer costs over the public internet. Which solution should the cloud architect implement to meet these requirements?

  1. Configure a VPC gateway endpoint to Amazon S3Answer
  2. B
    Create a VPC peering connection to Amazon EBS
  3. C
    Configure a network access control list (NACL) to route traffic to Amazon EFS
  4. D
    Configure AWS Transit Gateway to establish a hub-and-spoke peering connection between the VPC and Amazon S3

Answer

Configure a VPC gateway endpoint to Amazon S3
Configuring a VPC gateway endpoint to Amazon S3 is the correct solution. It provides private, secure connectivity between the private subnet in the VPC and Amazon S3 without requiring public IP addresses, an internet gateway, or a NAT gateway. Traffic to S3 is routed locally through the endpoint and stays entirely within the AWS network, meeting all security and cost-reduction requirements.

Step-by-Step Solution

1
Identify the storage service required by the application.
The application requires object storage, which points to Amazon S3.
Establishing the correct destination service ensures the right connectivity option is selected.
2
Analyze the network security and cost constraints.
Traffic must not traverse the public internet, must remain inside the AWS network, and must avoid NAT gateway costs.
This rules out standard routes like NAT gateways or internet gateways that send traffic over public paths or add runtime costs.
3
Evaluate the AWS networking feature designed for private service access within a VPC.
A VPC gateway endpoint is the specific feature that allows private, free routing from a VPC to Amazon S3.
Gateway endpoints keep traffic localized to the AWS network and bypass the need for public internet access.

Key Concept

VPC Endpoints (Gateway Endpoints) for private AWS service connectivity
Estimated Time:1m 30s
Rate this question

Topics

AWS Network Services

More questions from this topic