Examkin

Question

Difficulty: EasyCost-Effective Network Routing and Data Transfer Optimization

A company has a fleet of Amazon EC2 instances running in a private subnet that daily upload 10 TB10\text{ TB} of data to an Amazon S3 bucket in the same AWS Region. Currently, the EC2 instances route this traffic through a NAT Gateway, which has led to high data processing charges. Which solution is the most cost-effective way to route this traffic and eliminate the NAT Gateway data processing charges?

  1. Create a gateway VPC endpoint for Amazon S3 and configure the route table of the private subnet to point to the endpoint.Answer
  2. B
    Deploy an interface VPC endpoint (AWS PrivateLink) for Amazon S3 in the private subnet and update the route table.
  3. C
    Provision a NAT Instance in a public subnet to replace the NAT Gateway and route the traffic through it.
  4. D
    Configure an AWS Transit Gateway to route the S3 traffic from the private subnet to the S3 bucket.

Answer

Create a gateway VPC endpoint for Amazon S3 and configure the route table of the private subnet to point to the endpoint.
The correct solution is to create a gateway VPC endpoint for Amazon S3 and configure the route table of the private subnet. Gateway VPC endpoints are provided by AWS at no additional cost and do not charge for data processing. By routing the S3-bound traffic through the gateway endpoint, the traffic stays within the AWS network and bypasses the NAT Gateway entirely, eliminating the NAT Gateway's data processing fees.

Step-by-Step Solution

1
Identify the destination and source of the traffic.
The source is EC2 instances in a private subnet, and the destination is an Amazon S3 bucket within the same AWS Region.
This establishes that both resources are in the same region, making local VPC endpoints viable.
2
Compare the cost structures of the routing options.
Gateway VPC endpoints for S3 are free of charge (no hourly or data processing fees). NAT Gateways and Interface VPC endpoints (AWS PrivateLink) both charge per GB of data processed.
Choosing a gateway VPC endpoint allows the 10 TB10\text{ TB} of daily traffic to bypass the NAT Gateway entirely, saving substantial data processing costs.
3
Select the option that routes traffic directly and securely at zero cost.
Creating a gateway VPC endpoint and updating the private subnet's route table.
This configuration routes all traffic destined for S3 through the endpoint without traversing the internet or NAT Gateway, completely eliminating data processing fees for S3 traffic.

Key Concept

Gateway VPC Endpoints provide a secure, cost-free path (with no hourly or data processing charges) to connect a VPC to Amazon S3 and Amazon DynamoDB, bypassing expensive NAT Gateways.
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization