A financial data analysis application runs on Amazon EC2 instances in a private subnet. The application downloads of financial market data monthly from an Amazon S3 bucket located in the same AWS Region. Currently, all outbound internet traffic from the private subnet is routed through a NAT Gateway. Which action should a solutions architect take to minimize the data transfer and processing costs most cost-effectively?
- Deploy a Gateway VPC Endpoint for Amazon S3 in the VPC and update the private subnet's route table to direct S3 traffic to the endpoint.Answer
- BConfigure an Interface VPC Endpoint for Amazon S3 in the VPC and route all S3 traffic through it.
- CKeep the existing routing through the NAT Gateway and purchase a Compute Savings Plan to lower the NAT Gateway data processing fees.
- DEstablish an AWS Transit Gateway, attach the VPC, and route the S3 traffic through a NAT Gateway managed by the Transit Gateway.
Answer
Deploy a Gateway VPC Endpoint for Amazon S3 in the VPC and update the private subnet's route table to direct S3 traffic to the endpoint.
The correct solution is to deploy a Gateway VPC Endpoint for Amazon S3. This endpoint is configured in the VPC route table and routes S3 traffic directly through the AWS internal network. Because Gateway VPC Endpoints do not incur any hourly or data processing charges, this completely eliminates the NAT Gateway processing fee for the of S3 traffic.
Step-by-Step Solution
Key Concept
Gateway VPC Endpoints for S3 and DynamoDB provide free, secure, private routing within the AWS network, bypassing NAT Gateways and eliminating data processing charges.
Estimated Time:1m 30s