An organization has a fleet of EC2 instances running in a private subnet in `us-east-1` that downloads of data monthly from Amazon S3 buckets located in the same Region. Currently, all outbound internet traffic, including the S3 traffic, flows through a NAT Gateway. In addition, the organization stores of raw application logs in an Amazon S3 Standard bucket. Analysis of log access patterns shows these logs are rarely accessed after days, but they must be retained for year for compliance audits.
Which combination of actions should the Solutions Architect take to reduce both storage and data transfer costs in the most cost-effective manner? (Select TWO.)
- Create an S3 Lifecycle policy to transition the application logs to Amazon S3 Glacier Flexible Retrieval after days.Answer
- Provision a Gateway VPC Endpoint for Amazon S3 and update the private subnet's route table to direct S3 traffic through the endpoint.Answer
- CProvision an Interface VPC Endpoint for Amazon S3 and configure the private subnet's route table to direct S3 traffic through the endpoint.
- DOrder an AWS Snowcone device monthly to archive the logs, and transfer them physically to an offsite location.
- EPurchase an EC2 Instance Savings Plan to offset the NAT Gateway data processing charges.
Answer
The correct actions are to create an S3 Lifecycle policy to transition the application logs to Amazon S3 Glacier Flexible Retrieval after 30 days, and to provision a Gateway VPC Endpoint for Amazon S3 and update the private subnet's route table.
Transitioning logs to Amazon S3 Glacier Flexible Retrieval after days is the most cost-effective storage strategy for compliance data that is rarely accessed. Provisioning a Gateway VPC Endpoint for Amazon S3 is the optimal way to bypass NAT Gateway data processing fees for same-Region S3 traffic without incurring new costs.
Step-by-Step Solution
Key Concept
Optimizing storage costs via S3 Lifecycle policies and eliminating data transfer costs using Gateway VPC Endpoints for S3.
Estimated Time:1m 30s