A logistics company hosts an inventory management system on Amazon EC2 instances located in a private subnet. The application frequently uploads large archive files to an Amazon S3 bucket in the same AWS Region. Currently, the traffic routes through a NAT Gateway, which is causing high NAT Gateway data processing charges. Which configuration change should a solutions architect implement to reduce data transfer costs most effectively?
- Create a gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.Answer
- BCreate an interface VPC endpoint for Amazon S3 and route the traffic through the endpoint.
- CDeploy an EC2 NAT instance in a public subnet and route the S3 traffic through it instead of the NAT Gateway.
- DAssign public IP addresses to the EC2 instances and route the traffic directly through an Internet Gateway.
Answer
Create a gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.
The correct option is to create a gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet. Gateway endpoints for Amazon S3 are free of charge and provide private, direct routing over the AWS internal network, completely bypassing the NAT Gateway and eliminating data processing charges.
Step-by-Step Solution
Key Concept
Gateway VPC Endpoints for S3 provide cost-free, direct connectivity to Amazon S3 from private subnets, bypassing NAT Gateways and avoiding data processing fees.