Examkin

Question

Difficulty: MediumCost-Effective Network Routing and Data Transfer Optimization

A company has an on-premises data center connected to AWS via a 1 Gbps1\text{ Gbps} AWS Direct Connect connection with a private virtual interface (VIF). An application running on-premises replicates 30 TB30\text{ TB} of backup files monthly to an Amazon S3 bucket. Currently, the traffic routes from the on-premises network, through the private VIF into a VPC, and then through a NAT Gateway to reach the Amazon S3 public endpoints. The company wants to minimize data transfer costs.

Which network routing modification will meet these requirements most cost-effectively?

  1. A
    Deploy a Gateway VPC Endpoint for Amazon S3 in the VPC and route the traffic from the on-premises network through the private VIF to the gateway endpoint.
  2. B
    Create an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3 in the VPC and route the traffic from the on-premises network through the private VIF to the interface endpoint.
  3. Configure a public virtual interface (VIF) on the AWS Direct Connect connection to access the Amazon S3 bucket directly.Answer
  4. D
    Set up an AWS Site-to-Site VPN over the public internet to bypass the Direct Connect connection and transfer the files directly to Amazon S3.

Answer

Configure a public virtual interface (VIF) on the AWS Direct Connect connection to access the Amazon S3 bucket directly.
Configuring a public virtual interface (VIF) on the AWS Direct Connect connection enables the on-premises router to receive route advertisements for AWS public IP addresses, including Amazon S3. This allows the backup traffic to be routed directly to S3 over the Direct Connect connection. It bypasses the VPC, avoiding NAT Gateway hourly and data processing charges, as well as the per-GB data processing fees associated with Interface VPC Endpoints.

Step-by-Step Solution

1
Analyze current cost drivers
The application routes S3 traffic through a NAT Gateway inside the VPC, which incurs a processing fee of 0.045perGB(0.045 per GB ( 1,350 USD/monthfor USD/month for 30\text{ TB}$).
Identifying where the current costs are coming from is necessary to optimize network design.
2
Evaluate Gateway and Interface VPC Endpoints for S3
Gateway VPC Endpoints do not support on-premises routing over Direct Connect. Interface VPC Endpoints support on-premises access but charge a processing fee of 0.01perGB(0.01 per GB ( 300$ USD/month).
Understanding endpoints allows you to determine their viability and costs for hybrid environments.
3
Evaluate AWS Direct Connect Public VIF
A public VIF routes S3 traffic directly over the existing Direct Connect connection to public AWS endpoints without needing a VPC transition, avoiding both NAT Gateway and Interface endpoint fees.
A public VIF is the most cost-effective architecture for dedicated hybrid-to-public service paths.

Key Concept

AWS Direct Connect Virtual Interface Types and S3 Routing Optimization
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization