An analytics workload runs on Amazon EC2 instances in private subnets. The instances downl… — AWS Certified Solutions Architect - Associate

An analytics workload runs on Amazon EC2 instances in private subnets. The instances download $30\text{ TB}$ of data monthly from Amazon S3 and write $15\text{ TB}$ of data monthly to an Amazon DynamoDB table in the same Region. Currently, all outbound traffic from the private subnets routes through NAT Gateways, leading to high data processing charges. Which two actions should a solutions architect recommend to reduce network data transfer costs? (Select TWO.)

Create a Gateway VPC endpoint for Amazon S3 and associate it with the private subnet route tables.Answer
Create a Gateway VPC endpoint for Amazon DynamoDB and associate it with the private subnet route tables.Answer
C
Deploy an Interface VPC endpoint for Amazon S3 and configure the private subnets to route traffic through it.
D
Deploy an Interface VPC endpoint for Amazon DynamoDB and configure the private subnets to route traffic through it.
E
Create a second NAT Gateway in another Availability Zone to distribute the data transfer load and lower processing rates.

Answer

Create a Gateway VPC endpoint for Amazon S3 and a Gateway VPC endpoint for Amazon DynamoDB, and associate both with the private subnet route tables.

Creating Gateway VPC endpoints for both Amazon S3 and Amazon DynamoDB and associating them with the private subnet route tables is the most cost-effective solution. Gateway VPC endpoints do not charge for data transfer or hourly usage, allowing the EC2 instances to bypass the NAT Gateways entirely for S3 and DynamoDB traffic and avoiding data processing charges.

Step-by-Step Solution

Analyze the current traffic flow and identify data transfer cost contributors.

The EC2 instances transfer

45\text{ TB}

of data monthly (

30\text{ TB}

to S3 and

15\text{ TB}

to DynamoDB) through NAT Gateways, incurring significant data processing charges.

Identifying the destinations and volumes allows choosing the most cost-effective routing mechanism.

Compare VPC Endpoint options for S3 and DynamoDB.

Both S3 and DynamoDB support Gateway VPC endpoints, which are free of charge, whereas Interface VPC endpoints charge hourly and per-GB processing fees.

Using Gateway VPC endpoints eliminates data transfer and hourly fees for traffic destined to S3 and DynamoDB.

Configure the routing topology.

Create Gateway VPC endpoints for S3 and DynamoDB and associate them with the private subnet route tables.

This updates the route tables so that traffic destined for S3 and DynamoDB is routed directly to the AWS services instead of passing through the NAT Gateway.

Key Concept

Gateway VPC Endpoints for S3 and DynamoDB allow cost-free private routing of traffic, avoiding NAT Gateway data processing charges.

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics