Examkin

Question

Difficulty: MediumManaging Storage and Data Transfer Costs

A company runs a logistics tracking application on Amazon EC2 instances in private subnets across multiple Availability Zones in the us-east-1 Region. An analysis of the monthly billing details reveals high data transfer and processing charges associated with NAT Gateways. The network traffic patterns show the following:

* Outbound uploads of telemetry files (30 TB per month) to Amazon S3.
* Inbound and outbound database operations (10 TB per month) with Amazon DynamoDB.
* Mapping updates (15 TB per month) downloaded from a partner company's API hosted in another AWS account in the same Region.

Which combination of actions will most cost-effectively reduce the NAT Gateway charges? (Select TWO.)

  1. Configure Gateway VPC Endpoints for Amazon S3 and Amazon DynamoDB in the VPC, and associate them with the route tables of the private subnets.Answer
  2. Work with the partner company to expose their API via an AWS PrivateLink VPC Endpoint Service, and create an Interface VPC Endpoint in the application's VPC.Answer
  3. C
    Provision Interface VPC Endpoints for Amazon S3 and Amazon DynamoDB in the VPC, and configure the application to use these endpoints.
  4. D
    Create a VPC Peering connection with the partner's VPC, and route S3 and DynamoDB traffic through the peered connection.
  5. E
    Replace the NAT Gateways with NAT Instances configured in an Auto Scaling group to handle all external traffic to S3, DynamoDB, and the partner API.

Answer

Configure Gateway VPC Endpoints for Amazon S3 and Amazon DynamoDB in the VPC, and associate them with the route tables of the private subnets. Work with the partner company to expose their API via an AWS PrivateLink VPC Endpoint Service, and create an Interface VPC Endpoint in the application's VPC.
Configuring Gateway VPC Endpoints for Amazon S3 and Amazon DynamoDB is the most cost-effective way to route S3 and DynamoDB traffic because Gateway Endpoints are free. Using AWS PrivateLink to connect to the partner API via an Interface VPC Endpoint decreases the data processing fee from the NAT Gateway rate of 0.045perGBtotheInterfaceEndpointrateof0.045 per GB to the Interface Endpoint rate of 0.01 per GB, yielding significant savings for the 15 TB of partner API traffic.

Step-by-Step Solution

1
Identify the high-volume traffic targets traversing the NAT Gateways.
S3 receives 30 TB/month, DynamoDB receives 10 TB/month, and the partner API receives 15 TB/month.
Categorizing the traffic flows allows targeting the most expensive components first.
2
Apply Gateway VPC Endpoints for S3 and DynamoDB.
Bypasses NAT Gateways for 40 TB/month of traffic at $0 cost.
Gateway Endpoints are free of charge and automatically route S3 and DynamoDB traffic locally within the VPC.
3
Address the partner API traffic using AWS PrivateLink.
Bypasses NAT Gateways for 15 TB/month of traffic, reducing the processing cost from 0.045perGBto0.045 per GB to 0.01 per GB.
Since the partner's API is hosted in the same Region, exposing it via a VPC Endpoint Service allows the logistics company to access it via an Interface Endpoint, avoiding NAT Gateway processing charges.

Key Concept

Bypassing NAT Gateways using S3/DynamoDB Gateway Endpoints and AWS PrivateLink Interface Endpoints to optimize data transfer and processing costs.
Rate this question

Topics

Managing Storage and Data Transfer Costs