Examkin

Question

Difficulty: EasyCost-Effective Network Routing and Data Transfer Optimization

A financial services company hosts an application on Amazon EC2 instances in a private subnet. The application downloads 1.5 TB1.5\text{ TB} of daily reports from an Amazon S3 bucket in the same AWS Region. The private subnet is configured with a route that sends all internet-bound traffic through a NAT Gateway. Which routing solution should a solutions architect implement to minimize data transfer costs?

  1. A
    Purchase a Compute Savings Plan to offset the NAT Gateway data processing charges.
  2. Create a Gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.Answer
  3. C
    Create an Interface VPC endpoint for Amazon S3 in the private subnet and update the route table.
  4. D
    Keep using the existing NAT Gateway to route the Amazon S3 traffic.

Answer

Creating a Gateway VPC endpoint for Amazon S3 and associating it with the private subnet's route table is the most cost-effective option, as Gateway VPC endpoints are free of charge and keep traffic entirely within the AWS network.
Creating a Gateway VPC endpoint for Amazon S3 is the most cost-effective solution. Gateway VPC endpoints are provided at no additional cost, and all data transfers through them are free of charge. This allows private EC2 instances to communicate securely with Amazon S3 without routing traffic through a NAT Gateway, avoiding both NAT Gateway data processing and hourly charges.

Step-by-Step Solution

1
Identify the source, destination, and quantity of traffic: Amazon EC2 instances in a private subnet downloading 1.5 TB1.5\text{ TB} of data daily from Amazon S3 in the same AWS Region.
The traffic is internal to the AWS Region and can be routed privately.
Traffic does not need to traverse the public internet to reach S3.
2
Evaluate the cost profiles of routing S3 traffic through a NAT Gateway, Interface VPC endpoint, and Gateway VPC endpoint.
NAT Gateways and Interface VPC endpoints incur hourly charges and data processing fees per gigabyte, while Gateway VPC endpoints for S3 are free of charge.
Using a Gateway VPC endpoint allows S3 traffic to bypass costly NAT Gateway data processing fees.
3
Update the subnet's route table to associate it with the new Gateway VPC endpoint.
Traffic destined for S3 will be automatically redirected to the gateway endpoint.
Route table associations direct traffic matching the S3 prefix list through the endpoint.

Key Concept

Gateway VPC Endpoints for S3 allow private instances to access S3 directly without going through a NAT Gateway or incurring data transfer/processing charges.
Estimated Time:1m 0s
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization