Examkin

Question

Difficulty: Very hardCost-Effective Network Routing and Data Transfer Optimization

A financial services company hosts a transaction processing workload on Amazon EC2 instances in the private subnets of VPC A in the us-east-1 Region. The instances upload 50 TB50\text{ TB} of data monthly to an Amazon S3 bucket. In addition, the instances replicate 30 TB30\text{ TB} of transaction logs monthly to a database cluster in VPC B within the same AWS Region. Currently, VPC A and VPC B are connected via an AWS Transit Gateway. All outbound S3 traffic from the private subnets in VPC A is routed through a NAT Gateway. The company wants to optimize the network design to reduce data transfer costs without compromising security. Which two actions should a solutions architect take to meet these requirements most cost-effectively? (Select TWO.)

  1. Create a gateway VPC endpoint for Amazon S3 in VPC A, and associate it with the route tables of the private subnets.Answer
  2. Establish a VPC peering connection between VPC A and VPC B, and route the compliance replication traffic through the peering connection instead of the Transit Gateway.Answer
  3. C
    Deploy an interface VPC endpoint for Amazon S3 in VPC A, and update the application configuration to use the PrivateLink DNS name.
  4. D
    Deploy an AWS Site-to-Site VPN connection between VPC A and VPC B over the Transit Gateway to secure and optimize the replication traffic.
  5. E
    Replace the NAT Gateway in VPC A with a self-managed NAT instance running on a configured Amazon EC2 instance to route the S3 and replication traffic.

Answer

Create a gateway VPC endpoint for Amazon S3 in VPC A, and establish a VPC peering connection between VPC A and VPC B to route compliance replication traffic.
The correct architecture uses a gateway VPC endpoint for Amazon S3 in VPC A, which is free of charge and routes S3 traffic privately, eliminating NAT Gateway processing fees. It also uses a VPC peering connection instead of the Transit Gateway to connect VPC A and VPC B, avoiding the Transit Gateway's data processing fee.

Step-by-Step Solution

1
Analyze S3 traffic cost optimization options
Determine that routing 50 TB50\text{ TB} of S3 traffic through a NAT Gateway incurs massive data processing fees. Implementing a Gateway VPC Endpoint for S3 in VPC A redirects this traffic directly to S3 privately with no data processing or hourly charges.
Gateway VPC endpoints are the most cost-effective way to access Amazon S3 from private subnets because they are completely free.
2
Analyze inter-VPC traffic cost optimization options
Determine that routing 30 TB30\text{ TB} of replication traffic through AWS Transit Gateway incurs processing fees of $0.02\$0.02 per GB\text{GB}. Establishing a VPC Peering connection between VPC A and VPC B and routing traffic through it avoids these processing fees.
VPC Peering does not charge for data processing within the same Region, making it more cost-effective than Transit Gateway for high-volume inter-VPC data transfer.

Key Concept

Minimizing data transfer costs in AWS by selecting the correct private connectivity options, specifically preferring Gateway VPC Endpoints for S3/DynamoDB over NAT Gateways/Interface Endpoints, and VPC Peering over Transit Gateway for high-volume intra-region traffic.
Estimated Time:3m 0s
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization