Examkin

Question

Difficulty: EasyCost-Effective Network Routing and Data Transfer Optimization

A healthcare provider runs a medical imaging application on Amazon EC2 instances within a private subnet. The application processes high-resolution MRI scans and archives approximately 5 TB5\text{ TB} of data weekly to an Amazon S3 bucket in the same AWS Region. Currently, the EC2 instances access Amazon S3 through a NAT Gateway, resulting in high data processing charges. The company wants to eliminate these NAT Gateway data processing charges while keeping the EC2 instances in the private subnet.

Which two actions should a solutions architect recommend to meet these requirements cost-effectively? (Select TWO.)

  1. Create a Gateway VPC endpoint for Amazon S3 in the VPC.Answer
  2. Update the route tables associated with the private subnet to route traffic destined for Amazon S3 through the gateway endpoint.Answer
  3. C
    Create an Interface VPC endpoint (AWS PrivateLink) for Amazon S3 in the private subnet.
  4. D
    Deploy an AWS Transit Gateway and configure it to route S3 traffic from the private subnet.
  5. E
    Provision a NAT instance in a public subnet and update the private subnet's route table to route S3 traffic through it.

Answer

Create a Gateway VPC endpoint for Amazon S3 in the VPC and update the route tables associated with the private subnet to route traffic destined for Amazon S3 through the gateway endpoint.
To eliminate NAT Gateway data processing charges for traffic directed to Amazon S3 from private subnets in the same Region, a Gateway VPC endpoint should be created. Gateway VPC endpoints do not charge for data transfer or processing. Additionally, the route tables of the private subnets must be updated to route traffic destined for Amazon S3 through this gateway endpoint.

Step-by-Step Solution

1
Determine the source, destination, and current route of the data transfer.
The source is EC2 instances in a private subnet, the destination is Amazon S3 in the same Region, and they are routing through a NAT Gateway.
This establishes that the traffic is internal to AWS but currently incurs NAT Gateway data processing charges.
2
Evaluate alternative routing options to eliminate NAT Gateway fees.
Identify that Gateway VPC endpoints are free and do not charge for data transfer or processing, unlike Interface VPC endpoints or NAT Gateway/Transit Gateway options.
This determines the most cost-effective resource to connect to Amazon S3.
3
Configure the Gateway VPC endpoint and update the routing path.
Create the Gateway VPC endpoint and update the private subnet's route table to route S3-destined traffic through the endpoint.
This redirects traffic away from the NAT Gateway and directly to S3 at no additional cost.

Key Concept

Using Gateway VPC Endpoints for S3 is a free routing mechanism that avoids NAT Gateway data processing charges for traffic within the same region.
Estimated Time:1m 30s
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization