A media company runs its video encoding application on Amazon EC2 instances in private sub… — AWS Certified Solutions Architect - Professional

A media company runs its video encoding application on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC in the `us-west-2` Region. The instances download $150\text{ TB}$ of raw video files monthly from an Amazon S3 bucket located in `us-west-2`. The VPC route tables currently direct all S3-bound traffic through NAT Gateways.

The company also generates $80\text{ TB}$ of transcoded video logs monthly on the EC2 instances, which are uploaded to a secondary S3 bucket in the `us-east-1` Region for long-term archival. These logs are currently uploaded over the internet through the NAT Gateways. The archival logs are rarely accessed but must be retained for at least $90\text{ days}$ .

Which combination of actions will reduce the data transfer and storage costs most effectively? (Select TWO.)

Create a Gateway VPC Endpoint for Amazon S3 in the `us-west-2` Region and associate it with the route tables of the private subnets.Answer
Configure an S3 Lifecycle policy on the destination S3 bucket in `us-east-1` to transition objects to Amazon S3 Glacier Flexible Retrieval after $1\text{ day}$ and expire them after $90\text{ days}$ .Answer
C
Provision an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3 in the VPC in `us-west-2` and configure the EC2 instances to use the endpoint DNS names.
D
Request an AWS Snowball Edge Storage Optimized device monthly, copy the log files to the device, and ship it to AWS to load the data into the S3 bucket in `us-east-1`.

Answer

Create a Gateway VPC Endpoint for Amazon S3 in the source region and associate it with the route tables of the private subnets, and configure an S3 Lifecycle policy on the destination bucket in the destination region to transition objects to Amazon S3 Glacier Flexible Retrieval after one day and expire them after 90 days.

Creating a Gateway VPC Endpoint for Amazon S3 in the source region allows the EC2 instances in private subnets to route both local and cross-region S3 traffic privately. This bypasses the NAT Gateways completely, eliminating the NAT Gateway data processing charge. In addition, transitioning the archived logs to Amazon S3 Glacier Flexible Retrieval after one day using an S3 Lifecycle policy minimizes storage fees in the destination region, and expiring them after 90 days avoids long-term accumulation costs.

Step-by-Step Solution

Analyze the current route path and data volume for local and cross-region S3 traffic.

Identified that

150\text{ TB}

of local S3 traffic and

80\text{ TB}

of cross-region S3 traffic are traversing the NAT Gateways, incurring high NAT Gateway data processing fees (

0.045\text{ per GB}

To determine the source of high data transfer costs.

Evaluate Gateway VPC Endpoints vs Interface VPC Endpoints for S3.

A Gateway VPC Endpoint has no hourly or data processing fees and supports both local and cross-region S3 traffic. An Interface VPC Endpoint (PrivateLink) incurs a

0.01\text{ per GB}

data processing fee, which would be expensive for

230\text{ TB}

of data.

To select the most cost-effective private connection method to Amazon S3.

Analyze the storage and retention requirements for the transcoded video logs.

Logs are stored in S3 Standard in the destination region, which is expensive for rarely accessed archival data. Transitioning them to Amazon S3 Glacier Flexible Retrieval after

1\text{ day}

and deleting them after

90\text{ days}

meets the business requirement at minimal cost.

To optimize the storage costs of the archival data.

Key Concept

Data transfer cost optimization using Gateway VPC Endpoints and storage tiering using S3 Lifecycle policies.

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics