Examkin

Question

Difficulty: Very hardOptimizing Resource Costs and Sizing

A financial services company manages a multi-account environment within an organization in AWS Organizations. The consolidated billing feature is enabled. The compute and data workloads are distributed as follows:

* Account A (Production): Runs a customer-facing web application on Amazon ECS using AWS Fargate across 33 Availability Zones. This account incurs a steady compute charge of $12,000 USD\$12,000\text{ USD} per month. Next month, a large-scale batch processing ETL pipeline will be migrated to run on AWS Lambda in this account, with an estimated cost of $5,000 USD\$5,000\text{ USD} per month.
* Account B (Analytics): Runs a cluster of Amazon EC2 c6g.xlarge instances (Linux) for continuous data analysis. This fleet runs 24/724/7 with a highly predictable load, costing $9,000 USD\$9,000\text{ USD} per month.

The ECS tasks in Account A require outbound internet access to communicate with external payment processing APIs. This traffic is currently routed through 33 NAT Gateways (one in each Availability Zone) and is highly critical, requiring strict high availability. The batch processing workload in Account A also requires internet access but can tolerate up to 44 hours of downtime during a failure. A review of the billing data reveals that a significant portion of Account A's NAT Gateway charges is due to transferring large datasets to Amazon S3 and Amazon DynamoDB.

Which combination of actions will optimize resource costs most effectively while maintaining the required availability constraints? (Select TWO.)

  1. Purchase a Compute Savings Plan in the organization's management account to cover the AWS Fargate tasks, EC2 instances, and future Lambda functions across both member accounts.Answer
  2. Deploy Gateway VPC endpoints for Amazon S3 and Amazon DynamoDB in Account A's VPC, and update the routing tables to route traffic to these services through the endpoints instead of the NAT Gateways.Answer
  3. C
    Purchase an EC2 Instance Savings Plan in the management account for the c6g instance family to cover the EC2 instances in Account B, the ECS Fargate tasks in Account A, and the upcoming Lambda functions.
  4. D
    Use AWS Resource Access Manager (RAM) to share an EC2 Instance Savings Plan purchased in Account B with Account A to apply the discount to the Fargate tasks.
  5. E
    Consolidate the three NAT Gateways in Account A into a single NAT Gateway in one Availability Zone to eliminate the hourly charges of the other two NAT Gateways.

Answer

The solutions architect should purchase a Compute Savings Plan in the organization's management account and deploy Gateway VPC endpoints for Amazon S3 and Amazon DynamoDB in Account A's VPC.
Purchasing a Compute Savings Plan at the AWS Organizations management account level allows the discount to be shared across consolidated billing member accounts, automatically covering EC2, Fargate, and Lambda workloads. In addition, deploying Gateway VPC endpoints for S3 and DynamoDB routes data traffic directly to these services, bypassing the NAT Gateways and eliminating data processing charges without reducing the availability of the internet route for the critical payment APIs.

Step-by-Step Solution

1
Analyze compute resource requirements across both accounts.
Identify that the compute footprint spans Amazon ECS Fargate (Account A), AWS Lambda (upcoming in Account A), and Amazon EC2 c6g (Account B).
Choosing a savings model requires mapping the different compute architectures and their baseline costs.
2
Evaluate Savings Plan types against the compute resource footprint.
Select a Compute Savings Plan because it applies to EC2, Fargate, and Lambda. Reject EC2 Instance Savings Plans because they do not cover Fargate or Lambda.
Ensures that the optimization strategy covers all eligible compute services across both member accounts.
3
Determine the purchasing account for the Savings Plan within AWS Organizations.
Recommend purchasing the plan in the organization's management account.
Allows consolidated billing to distribute the discount benefit across all member accounts automatically.
4
Analyze NAT Gateway data transfer and design a network optimization strategy.
Identify that S3 and DynamoDB data transfer goes through NAT Gateways. Deploy Gateway VPC endpoints for S3 and DynamoDB to route this traffic directly and eliminate data processing fees.
Bypasses NAT Gateways for AWS service traffic, saving data processing costs at no extra charge.
5
Verify compliance with the high-availability requirements.
Retain the three NAT Gateways for the critical payment gateway subnets to avoid a single point of failure.
Consolidating all outbound traffic to a single NAT Gateway would violate the strict high-availability constraint for the customer portal.

Key Concept

Evaluating Savings Plans coverage and optimizing network traffic via VPC endpoints to balance cost reductions with application availability constraints.
Rate this question

Topics

Optimizing Resource Costs and Sizing

More questions from this topic