An organization runs a daily batch analytics workload on a fleet of Amazon EC2 instances in private subnets across three Availability Zones in the `eu-west-1` Region. The workload downloads a static reference dataset every day from a central Amazon S3 bucket in the `us-east-1` Region. The dataset is updated only once per month. The instances also write of logs daily to an S3 bucket in the `eu-west-1` Region. Currently, all outbound traffic to S3 is routed through NAT Gateways in the VPC. The monthly bill shows high NAT Gateway data processing and cross-Region data transfer charges.
Which TWO actions should a Solutions Architect recommend to optimize these costs?
- Configure an S3 Gateway Endpoint in the VPC and associate it with the route tables of the private subnets.Answer
- Configure Amazon S3 Cross-Region Replication (CRR) to replicate the dataset from the us-east-1 bucket to a new S3 bucket in the eu-west-1 Region, and update the workload to read from the local bucket.Answer
- CDeploy S3 Interface Endpoints (AWS PrivateLink) in each Availability Zone within the VPC, and update the route tables to route S3 traffic through these endpoints.
- DEstablish an AWS Direct Connect connection with a public virtual interface (VIF) to route S3 traffic directly from the VPC to Amazon S3 over a private network path.
- ESet up a VPC Peering connection between the VPC in eu-west-1 and a new VPC in us-east-1 containing an S3 Gateway Endpoint, and route S3 traffic through the peering connection.
Answer
Configure an S3 Gateway Endpoint in the VPC and associate it with the route tables of the private subnets, and configure Amazon S3 Cross-Region Replication (CRR) to replicate the dataset from the `us-east-1` bucket to a new S3 bucket in the `eu-west-1` Region, updating the workload to read from the local bucket.
To eliminate the NAT Gateway data processing charges for writing logs to the local S3 bucket, creating an S3 Gateway Endpoint in the VPC and associating it with the private route tables is the most cost-effective approach since S3 Gateway Endpoints are free. To eliminate the daily cross-Region data transfer costs of downloading a static dataset from the `us-east-1` region, replicating it once to the local `eu-west-1` region using Amazon S3 Cross-Region Replication (CRR) allows the EC2 instances to perform local reads via the Gateway Endpoint, avoiding recurring cross-Region charges.
Step-by-Step Solution
Key Concept
Managing Storage and Data Transfer Costs using S3 Gateway Endpoints and Cross-Region Replication