An image processing application runs on Amazon EC2 instances in private subnets across thr… — AWS Certified Solutions Architect - Professional

An image processing application runs on Amazon EC2 instances in private subnets across three Availability Zones in a VPC. The application downloads and processes approximately $80\text{ TB}$ of raw files per month from an Amazon S3 bucket in the same Region and uploads the results back. The application also queries a metadata database hosted in a partner company's VPC in the same Region. These API queries transfer approximately $15\text{ TB}$ of data monthly and are currently routed over the public internet through the application's NAT Gateways to the partner's public API endpoint. The company wants to reduce the high data transfer and NAT Gateway processing costs while maintaining high availability.

Which two of the following actions should the Solutions Architect recommend to achieve these goals? (Select TWO.)

Create a Gateway VPC Endpoint for Amazon S3 in the application's VPC, and associate it with the route tables of the private subnets.Answer
Request the partner company to publish their metadata database API as an AWS PrivateLink VPC Endpoint Service, and create an Interface VPC Endpoint in the application's VPC to access the API.Answer
C
Consolidate the NAT Gateways across the three Availability Zones into a single NAT Gateway in one Availability Zone to eliminate the hourly charges of the other two NAT Gateways.
D
Route all S3 and API traffic from the application VPC through an AWS Transit Gateway to a centralized egress VPC that contains a dedicated NAT Gateway pool.
E
Create a Route 53 Private Hosted Zone for the partner's API domain in a centralized AWS account, but do not associate it with the application VPC.

Answer

Create a Gateway VPC Endpoint for Amazon S3 in the application's VPC, and request the partner company to publish their metadata database API as an AWS PrivateLink VPC Endpoint Service to establish an Interface VPC Endpoint.

Deploying a Gateway VPC Endpoint for S3 completely eliminates data processing fees for the

80\text{ TB}

of S3 traffic, as Gateway Endpoints are free. Deploying an Interface VPC Endpoint (AWS PrivateLink) for the partner API routes the

15\text{ TB}

of traffic privately, reducing the data processing fee from

0.045 per GB (NAT Gateway) to

0.01 per GB and eliminating public internet egress charges.

Step-by-Step Solution

Identify S3 traffic volume and determine the most cost-effective VPC connection type.

Amazon S3 traffic accounts for

80\text{ TB}

per month. A Gateway VPC Endpoint is free of charge (no hourly or data processing fees).

Using a Gateway VPC Endpoint bypasses NAT Gateways and eliminates all data processing costs for S3 traffic.

Analyze API traffic volume and compare NAT Gateway costs vs AWS PrivateLink Interface Endpoint costs.

API traffic accounts for

15\text{ TB}

per month. NAT Gateway processing is

0.045 per GB, plus internet data transfer out of

0.09 per GB. AWS PrivateLink charges $0.01 per GB for processing and eliminates internet egress fees.

AWS PrivateLink reduces the processing charge by

78\%

and avoids public egress charges entirely, keeping traffic on the AWS backbone.

Key Concept

Reducing NAT Gateway processing and data transfer charges by utilizing VPC Gateway Endpoints for S3 and Interface Endpoints (AWS PrivateLink) for cross-VPC API communication.

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics