Examkin

Question

Difficulty: MediumCost-Effective Network Routing and Data Transfer Optimization

A company hosts a data processing application on Amazon EC2 instances in a private subnet. The application downloads 50 TB50\text{ TB} of raw data monthly from Amazon S3, processes the data, and writes the metadata to an Amazon DynamoDB table. The EC2 instances must also periodically access the public internet to download software updates. Currently, all outbound traffic from the private subnet routes through a NAT gateway. A solutions architect must optimize the network routing to reduce data transfer and processing costs. Which two actions should the solutions architect take to meet these requirements? (Select TWO.)

  1. Create a gateway VPC endpoint for Amazon S3 and associate it with the private subnet's route table.Answer
  2. Create a gateway VPC endpoint for Amazon DynamoDB and associate it with the private subnet's route table.Answer
  3. C
    Keep routing the S3 data transfer through the NAT gateway and configure AWS Budgets to alert when monthly costs exceed a set limit.
  4. D
    Establish a single AWS Site-to-Site VPN connection and route the DynamoDB metadata traffic through the VPN tunnel to bypass the NAT gateway.
  5. E
    Configure the application to write the temporary processed datasets to S3 Standard-Infrequent Access (S3 Standard-IA) and delete them after 1010 days.

Answer

The solutions architect should create a gateway VPC endpoint for Amazon S3 and a gateway VPC endpoint for Amazon DynamoDB, associating both with the private subnet's route table.
Creating gateway VPC endpoints for both Amazon S3 and Amazon DynamoDB and associating them with the subnet's route table is the most cost-effective solution. Gateway endpoints do not incur hourly or data processing charges, keeping the high-volume data transfers (50 TB50\text{ TB}) free. The NAT gateway is kept in place to handle low-volume outbound traffic for external software updates.

Step-by-Step Solution

1
Analyze current network flow and identify cost bottlenecks.
All traffic to Amazon S3 (50 TB50\text{ TB}) and Amazon DynamoDB is flowing through the NAT gateway, incurring high data processing charges ($0.045 per GB).
Traffic to public AWS services from private subnets defaults to the NAT gateway if endpoints are not configured.
2
Identify cost-effective alternatives for internal AWS service communication.
Gateway VPC endpoints are free of charge and provide direct routing to Amazon S3 and Amazon DynamoDB within the same Region.
Gateway endpoints bypass NAT gateways and route traffic privately over the AWS network backbone, eliminating processing fees.
3
Evaluate the remaining internet traffic requirements.
EC2 instances still require the NAT gateway for software updates from external repositories.
Gateway VPC endpoints only route traffic to S3 and DynamoDB; other public internet traffic continues using the NAT gateway routing path.

Key Concept

Gateway VPC Endpoints for S3 and DynamoDB
Estimated Time:2m 0s
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization