Examkin

Question

Difficulty: HardData Transfer Cost Optimization

A company's SysOps administrator is reviewing the data transfer costs for a workload running on Amazon EC2 instances in private subnets across two Availability Zones. The instances perform the following tasks:

* Retrieve 20 TB20\text{ TB} of configuration files and static assets monthly from an Amazon S3 bucket in the same AWS Region.
* Publish 15 TB15\text{ TB} of transactional telemetry data monthly to Amazon Kinesis Data Streams in the same AWS Region.

Currently, all traffic to these services is routed through NAT Gateways located in each Availability Zone. Which combination of actions should the SysOps administrator take to achieve the maximum cost savings? (Select TWO.)

  1. Create a gateway VPC endpoint for Amazon S3 and associate it with the private subnet route tables.Answer
  2. Create interface VPC endpoints for Amazon Kinesis Data Streams in the private subnets and enable private DNS.Answer
  3. C
    Create an interface VPC endpoint for Amazon S3 and associate it with the private subnet route tables.
  4. D
    Consolidate the NAT Gateways into a single Availability Zone and route all outbound traffic through it.
  5. E
    Configure the private subnet route tables to direct all Kinesis and S3 traffic through an AWS Transit Gateway.

Answer

Create a gateway VPC endpoint for Amazon S3 and associate it with the private subnet route tables, and create interface VPC endpoints for Amazon Kinesis Data Streams in the private subnets and enable private DNS.
The correct options are to create a gateway VPC endpoint for Amazon S3 and interface VPC endpoints for Amazon Kinesis Data Streams. Gateway VPC endpoints are free and eliminate the NAT Gateway data processing charges for S3 (0.045/GB).InterfaceVPCendpoints(PrivateLink)forKinesisDataStreamschargeamuchlowerprocessingfee(0.045/GB). Interface VPC endpoints (PrivateLink) for Kinesis Data Streams charge a much lower processing fee ( 0.01/GB) compared to NAT Gateways ($0.045/GB), reducing the overall cost for Kinesis traffic.

Step-by-Step Solution

1
Analyze S3 traffic cost optimization options.
Using a Gateway VPC Endpoint for Amazon S3 routes S3 traffic directly over the AWS network without traversing the NAT Gateway. Gateway endpoints have no hourly or data processing charges, saving 100%100\% of the NAT Gateway data processing fees (0.045perGB)forthe0.045 per GB) for the 20\text{ TB}$ of data.
Identify the most cost-effective routing method for Amazon S3 traffic originating from private subnets.
2
Analyze Kinesis Data Streams traffic cost optimization options.
Using an Interface VPC Endpoint (AWS PrivateLink) for Kinesis Data Streams routes traffic directly within the VPC. The data processing fee for an interface endpoint is 0.01perGB,comparedtothe0.01 per GB, compared to the 0.045 per GB charged by the NAT Gateway, yielding a net saving of 0.035perGBforthe0.035 per GB for the 15\text{ TB}$ of telemetry data.
Identify the most cost-effective private routing method for AWS services that do not support Gateway VPC Endpoints.
3
Compare the proposed optimizations against other alternatives.
Gateway endpoints are superior to interface endpoints for S3 because gateway endpoints are free. Interface endpoints for Kinesis are superior to NAT Gateways because the per-GB processing fee is lower. Single-AZ NAT Gateway consolidation or Transit Gateway routing introduce additional data transfer or processing charges.
Ensure that the selected options provide the maximum cost savings while maintaining high availability.

Key Concept

Optimizing VPC data transfer costs by utilizing Gateway and Interface VPC Endpoints to bypass NAT Gateways for AWS service traffic.
Rate this question

Topics

Data Transfer Cost Optimization

More questions from this topic