Examkin

Question

Difficulty: EasyCost-Effective Network Routing and Data Transfer Optimization

A company runs a data processing application on Amazon EC2 instances in a private subnet. The application daily downloads 5 TB5\text{ TB} of data from an Amazon S3 bucket in the same AWS Region and writes transactional updates to an Amazon DynamoDB table. Currently, all traffic to S3 and DynamoDB is routed through a NAT Gateway, resulting in high data transfer charges. Which of the following configurations should the solutions architect implement to minimize network data transfer costs? (Select TWO.)

  1. Create a Gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.Answer
  2. Create a Gateway VPC endpoint for Amazon DynamoDB and associate it with the route table of the private subnet.Answer
  3. C
    Create Interface VPC endpoints (AWS PrivateLink) for Amazon S3 and DynamoDB to route the traffic.
  4. D
    Configure AWS Budgets to alert the administrator when the NAT Gateway data processing charges exceed a set limit.
  5. E
    Change the DynamoDB table capacity mode to Provisioned Capacity Mode with Auto Scaling enabled.

Answer

To minimize network data transfer costs, the solutions architect should create Gateway VPC endpoints for both Amazon S3 and Amazon DynamoDB, and associate them with the route table of the private subnet.
Creating Gateway VPC endpoints for Amazon S3 and Amazon DynamoDB and associating them with the route table of the private subnet redirects all traffic destined for these services directly over the AWS internal network. This routes the traffic without traversing the NAT Gateway, completely eliminating the per-GB data processing fees for these transfers.

Step-by-Step Solution

1
Analyze the current traffic flow and identify cost drivers.
The application transfers 5 TB5\text{ TB} of data daily to S3 and writes to DynamoDB through a NAT Gateway, which incurs high hourly and per-GB data processing charges.
Identifying the NAT Gateway as the source of high data transfer costs helps target the correct optimization strategy.
2
Select the most cost-effective VPC endpoint type for the target services.
Identify that S3 and DynamoDB are the only two services that support Gateway VPC endpoints, which are offered at no additional cost (no hourly or data processing charges).
Gateway endpoints are the most cost-effective option for S3 and DynamoDB compared to Interface endpoints.
3
Update route tables to redirect S3 and DynamoDB traffic directly to the gateway endpoints.
Associating the Gateway VPC endpoints with the private subnet's route table automatically routes S3 and DynamoDB traffic directly through the endpoints, bypassing the NAT Gateway.
Updating the route table is required to ensure the private subnet instances use the new direct network path.

Key Concept

Gateway VPC Endpoints provide free, direct routing to Amazon S3 and Amazon DynamoDB from private subnets, eliminating NAT Gateway data processing fees.
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization