An enterprise has deployed a data analysis pipeline in the us-east-1 Region across two VPC… — AWS Certified Solutions Architect - Associate

An enterprise has deployed a data analysis pipeline in the us-east-1 Region across two VPCs. VPC A contains a fleet of Amazon EC2 instances in private subnets that download $30\text{ TB}$ of data monthly from an Amazon S3 bucket. Additionally, these instances transfer $10\text{ TB}$ of data monthly to a database cluster hosted in VPC B. Currently, all traffic from VPC A's private subnets to the internet and Amazon S3 is routed through a NAT Gateway in VPC A's public subnet. Inter-VPC traffic between VPC A and VPC B is routed via an AWS Transit Gateway. Which two network routing configurations should the solutions architect implement to minimize monthly data transfer and infrastructure costs? (Select TWO.)

Create a gateway VPC endpoint for Amazon S3 in VPC A, and associate it with the private subnet route tables.Answer
Establish a VPC peering connection between VPC A and VPC B, and update the private subnet route tables to route VPC B traffic through the peering connection.Answer
C
Create an interface VPC endpoint for Amazon S3 in VPC A, and update the private subnet route tables to direct S3 traffic through the interface endpoint.
D
Replace the NAT Gateway in VPC A with a self-managed NAT instance on an Amazon EC2 instance, and route all external traffic through the NAT instance.
E
Configure an AWS Site-to-Site VPN connection between VPC A and VPC B, and route VPC B traffic through the VPN connection.

Answer

Establish a VPC peering connection between VPC A and VPC B, and create a gateway VPC endpoint for Amazon S3 in VPC A.

To minimize monthly costs, the S3 data transfer should bypass the NAT Gateway by utilizing a Gateway VPC Endpoint for S3, which is free of charge. The inter-VPC traffic should bypass the AWS Transit Gateway by establishing a VPC Peering connection, which has no hourly or data processing charges for same-region traffic, unlike Transit Gateway.

Step-by-Step Solution

Analyze S3 traffic cost

Routing

30\text{ TB}

of S3 traffic through a NAT Gateway incurs data processing charges of $0.045 per GB, totaling substantial monthly costs.

S3 traffic should bypass NAT Gateways to avoid unnecessary processing charges.

Select the optimal S3 access method

Creating a Gateway VPC Endpoint for S3 in VPC A is free, incurs no data processing fees, and provides a direct route to S3.

Gateway endpoints are the most cost-effective way to access S3 privately from a VPC.

Analyze inter-VPC traffic cost

Routing

10\text{ TB}

of data through AWS Transit Gateway incurs an hourly attachment charge and a data processing charge of $0.02 per GB.

Transit Gateway is suboptimal for simple same-region VPC-to-VPC routing of high volume data.

Select the optimal inter-VPC routing method

Establishing a VPC Peering connection between VPC A and VPC B is free and does not charge data processing fees for traffic within the same region.

VPC Peering eliminates the Transit Gateway hourly and processing fees.

Key Concept

Optimizing network costs by routing S3 traffic via Gateway VPC Endpoints and routing same-region inter-VPC traffic via VPC Peering rather than Transit Gateway or NAT Gateways.

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics