Examkin

Question

Difficulty: MediumCost-Effective Network Routing and Data Transfer Optimization

An enterprise operates a data processing application deployed on Amazon EC2 instances in private subnets within an application VPC. The application needs to transfer 100 TB100\text{ TB} of data monthly to a central database VPC located in the same AWS Region. Additionally, the EC2 instances must upload 80 TB80\text{ TB} of processed log files monthly to an Amazon S3 bucket. Currently, both the database VPC traffic and the S3 traffic are routed through an AWS Transit Gateway and a NAT Gateway. A solutions architect needs to optimize the network architecture to minimize data transfer charges. Which two actions should the solutions architect recommend to meet these requirements most cost-effectively? (Select TWO.)

  1. Establish a VPC Peering connection between the application VPC and the database VPC, and update the route tables to route database traffic through the peering connection.Answer
  2. Create a Gateway VPC Endpoint for Amazon S3 in the application VPC, and associate it with the private subnet route tables to direct S3 traffic.Answer
  3. C
    Replace the NAT Gateway with an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3 to handle the log uploads.
  4. D
    Deploy an AWS Site-to-Site VPN connection between the application VPC and the database VPC to secure and route the database traffic.
  5. E
    Assign public IP addresses to the EC2 instances and configure them to transfer the data directly to the database VPC and Amazon S3 over the public internet.

Answer

Establish a VPC Peering connection between the application VPC and the database VPC to route database traffic, and create a Gateway VPC Endpoint for Amazon S3 in the application VPC to route S3 traffic.
Establishing a VPC Peering connection enables direct routing between the application and database VPCs without incurring the data processing fees of AWS Transit Gateway. Creating a Gateway VPC Endpoint for Amazon S3 directs the log upload traffic directly to S3 without traversing the NAT Gateway, eliminating the NAT Gateway data processing and hourly charges.

Step-by-Step Solution

1
Analyze database VPC data transfer costs
Database traffic (100 TB100\text{ TB}) currently routes over AWS Transit Gateway, which charges a processing fee of 0.02 USD0.02\text{ USD} per GB\text{GB}. Routing via VPC Peering charges 0 USD0\text{ USD} for data processing and uses the standard underlying network topology.
Identify the most cost-effective connection type between the application VPC and the database VPC.
2
Analyze S3 upload data transfer costs
S3 uploads (80 TB80\text{ TB}) currently route through a NAT Gateway, which charges a processing fee of 0.045 USD0.045\text{ USD} per GB\text{GB} in addition to hourly charges. Setting up a Gateway VPC Endpoint is free and routes the traffic directly to S3.
Identify the most cost-effective endpoint type for routing S3 traffic from private subnets.

Key Concept

AWS Data Transfer Cost Optimization using VPC Peering and Gateway Endpoints
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization