Examkin

Question

Difficulty: EasyCost-Effective Network Routing and Data Transfer Optimization

A company has Amazon EC2 instances in a private subnet that frequently transfer hundreds of gigabytes of data to and from an Amazon S3 bucket. The private subnet currently routes all traffic to the internet through a NAT Gateway. The company wants to reduce the high data transfer costs associated with S3 access. Which action is the most cost-effective solution to meet these requirements?

  1. Create a Gateway VPC Endpoint for Amazon S3 and update the route table of the private subnet to direct S3 traffic to the endpoint.Answer
  2. B
    Create an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3 and route all S3 traffic through it.
  3. C
    Provision an additional NAT Gateway in a different Availability Zone to distribute the S3 data transfer load.
  4. D
    Replace the NAT Gateway with a NAT Instance to handle the traffic at a lower per-gigabyte data transfer rate.

Answer

Create a Gateway VPC Endpoint for Amazon S3 and update the route table of the private subnet to direct S3 traffic to the endpoint.
Creating a Gateway VPC Endpoint for Amazon S3 and updating the route table is the most cost-effective option because Gateway VPC Endpoints are free to deploy and do not incur data processing or transfer charges. This completely removes the S3 traffic from the NAT Gateway, eliminating the associated NAT Gateway processing fees.

Step-by-Step Solution

1
Identify the source of the high data transfer charges.
The traffic to Amazon S3 from private EC2 instances is routing through a NAT Gateway, which incurs per-gigabyte data processing fees.
Traffic destined for public AWS service endpoints like S3 is treated as internet traffic by default and must go through a NAT gateway from a private subnet.
2
Select a routing alternative that bypasses the NAT Gateway.
Gateway VPC Endpoints for Amazon S3 allow traffic to be routed directly to S3 within the AWS internal network without leaving the VPC.
Gateway VPC Endpoints are free to create and use, and do not charge for data processing.
3
Configure the route tables to apply the changes.
Updating the private subnet's route table to point S3-destined traffic to the Gateway VPC Endpoint prefix list ensures all S3 traffic bypasses the NAT Gateway.
Route tables must be explicitly updated so that traffic to S3 is redirected away from the default route pointing to the NAT Gateway.

Key Concept

Gateway VPC Endpoints provide a secure and completely free mechanism to route traffic from a VPC to Amazon S3 and Amazon DynamoDB, bypassing expensive NAT Gateways.
Estimated Time:1m 0s
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization