Examkin

Question

Difficulty: EasyCost-Effective Network Routing and Data Transfer Optimization

A telemetry processing system runs on Amazon EC2 instances deployed inside a private subnet. The application continuously ingests sensor data, writes the processed results to an Amazon DynamoDB table, and archives raw payloads in an Amazon S3 bucket. Currently, all traffic to these services passes through a NAT Gateway, leading to high data processing costs.

Which TWO configurations should a solutions architect implement to minimize these network costs? (Select TWO.)

  1. Create a gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.Answer
  2. Create a gateway VPC endpoint for Amazon DynamoDB and associate it with the route table of the private subnet.Answer
  3. C
    Create an interface VPC endpoint for Amazon S3 to bypass the NAT Gateway.
  4. D
    Create an interface VPC endpoint for Amazon DynamoDB to bypass the NAT Gateway.
  5. E
    Set up an AWS Transit Gateway to route the S3 and DynamoDB traffic directly.

Answer

Create a gateway VPC endpoint for Amazon S3 and a gateway VPC endpoint for Amazon DynamoDB, then associate both with the route table of the private subnet.
The correct choices are the configurations that establish gateway VPC endpoints for Amazon S3 and Amazon DynamoDB and associate them with the private subnet's route table. Gateway VPC endpoints are provided by AWS at no additional cost and do not charge for data transfer or data processing. By routing traffic directly through these endpoints, the EC2 instances bypass the NAT Gateway, eliminating the NAT Gateway data processing fees.

Step-by-Step Solution

1
Identify that the current traffic path to Amazon S3 and Amazon DynamoDB goes through a NAT Gateway, which incurs data processing fees.
Confirming NAT Gateway data processing fees are the source of high costs.
Analyzing the architecture to find the bottleneck.
2
Determine if Amazon S3 and Amazon DynamoDB support Gateway VPC Endpoints.
S3 and DynamoDB are the only two services that support free Gateway VPC Endpoints.
Choosing the most cost-effective VPC endpoint type.
3
Recognize that Gateway VPC Endpoints are free to use (no hourly or data processing charges).
Traffic routed via Gateway Endpoints bypasses the NAT Gateway at zero cost.
Confirming the cost savings compared to Interface Endpoints.
4
Implement Gateway VPC Endpoints for both S3 and DynamoDB and update the private subnet's route table to route traffic directly.
The route table directs S3 and DynamoDB traffic through the VPC endpoint directly instead of the default route to the NAT Gateway.
Finalizing the cost-effective architecture configuration.

Key Concept

Gateway VPC Endpoints for S3 and DynamoDB provide a zero-cost routing mechanism to access these services privately from a VPC, bypassing NAT Gateways.
Estimated Time:1m 30s
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization