Examkin

Question

Difficulty: HardManaging Storage and Data Transfer Costs

A financial institution has a hybrid architecture with a 10 Gbps10\text{ Gbps} AWS Direct Connect connection using a Private Virtual Interface (VIF) to a Direct Connect Gateway. The gateway is associated with an AWS Transit Gateway that connects 55 VPCs in the `us-east-1` Region. Currently, application servers in these VPCs transfer 300 TB300\text{ TB} of transactional logs monthly to an Amazon S3 bucket in the same Region via NAT Gateways in each Availability Zone. Concurrently, an on-premises backup system synchronizes 150 TB150\text{ TB} of data monthly to another S3 bucket in `us-east-1` over the internet using public S3 endpoints. Which of the following solutions reduces data transfer and processing costs most effectively while maintaining high availability?

  1. Create an Amazon S3 Gateway Endpoint in each VPC, update the VPC route tables to direct S3 traffic to the gateway endpoints, and establish a Public VIF on the existing Direct Connect connection to route the on-premises S3 synchronization traffic.Answer
  2. B
    Consolidate the NAT Gateways in each VPC to a single Availability Zone to eliminate hourly NAT Gateway charges, create an S3 Gateway Endpoint in each VPC, and deploy an S3 Interface Endpoint in a shared VPC to route on-premises traffic through the Direct Connect Private VIF and Transit Gateway.
  3. C
    Deploy an Amazon S3 Interface Endpoint in each VPC for all VPC-to-S3 traffic, and establish a Transit VIF on the Direct Connect connection to route the on-premises S3 backup traffic through the Transit Gateway to the S3 Interface Endpoints.
  4. D
    Create an Amazon S3 Gateway Endpoint in each VPC to optimize VPC S3 traffic, and request a new AWS Snowball Edge Storage Optimized device monthly to physically copy and ship the 150 TB150\text{ TB} of backup data to AWS.

Answer

Create an Amazon S3 Gateway Endpoint in each VPC, update the VPC route tables to direct S3 traffic to the gateway endpoints, and establish a Public VIF on the existing Direct Connect connection to route the on-premises S3 synchronization traffic.
The correct solution uses Amazon S3 Gateway Endpoints in each VPC, which are free and eliminate the NAT Gateway data processing fees of $0.045 per gigabyte for the 300 TB of VPC-to-S3 traffic. For the on-premises backup synchronization traffic of 150 TB, creating a Public Virtual Interface (VIF) on the existing Direct Connect connection allows the traffic to route directly to S3 public endpoints. Because data transfer in to AWS is free, this avoids both the Transit Gateway processing fees of 0.02 per gigabyte and S3 Interface Endpoint data processing fees of 0.01 per gigabyte, resulting in a zero-cost solution for the hybrid data synchronization.

Step-by-Step Solution

1
Analyze the current VPC S3 traffic cost.
The VPC-to-S3 traffic is 300 TB300\text{ TB} monthly. Routing this through NAT Gateways incurs data processing fees of 300,000 GB×$0.045/GB=$13,500300,000\text{ GB} \times \$0.045\text{/GB} = \$13,500 per month.
To identify the largest source of data processing charges in the current architecture.
2
Select the optimal VPC-to-S3 routing method.
S3 Gateway Endpoints are free and support high availability natively. Transitioning the 300 TB300\text{ TB} of logs to S3 Gateway Endpoints reduces the VPC data processing costs from $13,500\$13,500 to $0\$0.
To eliminate NAT Gateway processing fees for Amazon S3 traffic while maintaining high availability.
3
Evaluate hybrid connectivity and data transfer paths for the on-premises backups.
Creating a Public VIF on the existing Direct Connect link allows the on-premises backup agent to write to S3 public IP addresses over Direct Connect. Since data transfer into AWS is free, and the path bypasses Transit Gateway and VPC interface endpoints, the 150 TB150\text{ TB} backup synchronization incurs $0\$0 in data transfer and processing fees.
To secure and optimize the on-premises to S3 synchronization without incurring Transit Gateway (0.02perGB)orInterfaceEndpoint(0.02 per GB) or Interface Endpoint ( 0.01 per GB) processing fees.

Key Concept

Minimizing data transfer and processing costs for high-throughput AWS and hybrid architectures using Gateway VPC Endpoints and Direct Connect Public VIFs.
Rate this question

Topics

Managing Storage and Data Transfer Costs