A financial services company is optimizing its network architecture in the us-east-1 Region to reduce mounting AWS data transfer and routing costs. The company's main application VPC (VPC-A) contains Amazon EC2 instances in private subnets that perform the following operations:
* Retrieve 120 TB of archive data monthly from an Amazon S3 bucket located in the us-east-1 Region.
* Query configuration metadata from an Amazon DynamoDB table in the us-east-1 Region.
* Replicate 50 TB of database logs monthly to another VPC (VPC-B) in the us-east-1 Region. This traffic is currently routed through an AWS Transit Gateway.
* Fetch software updates from the internet (approximately 20 GB monthly) via a NAT Gateway.
Which combination of architectural modifications will achieve the maximum cost reduction? (Select TWO.)
- Create Gateway VPC Endpoints for both Amazon S3 and Amazon DynamoDB in the main application VPC, and configure the private subnet route tables to direct traffic to these endpoints.Answer
- Establish a VPC Peering connection between the two VPCs, and update the subnet route tables to route the database replication traffic through the peering connection instead of the Transit Gateway.Answer
- CDeploy Interface VPC Endpoints for Amazon S3 and Amazon DynamoDB in the main application VPC, and configure DNS resolution to route traffic through these endpoints.
- DConfigure an AWS Site-to-Site VPN connection over the internet between the two VPCs, and update the route tables to route the database replication traffic through the VPN tunnels.
- EReplace the NAT Gateway in the main application VPC with a NAT Instance deployed on a single small EC2 instance, and route all S3 and DynamoDB traffic through it.