Examkin

Soru

Zorluk: ZorCost-Effective Network Routing and Data Transfer Optimization

A company hosts a microservices application on AWS Fargate tasks running in private subnets. The tasks frequently pull large container images, totaling 120 TB120\text{ TB} of data transfer per month, from Amazon Elastic Container Registry (Amazon ECR) in the same AWS Region. Currently, the route tables for the private subnets direct all default outbound traffic (0.0.0.0/00.0.0.0/0) through a NAT Gateway. A solutions architect must design a routing architecture to minimize data transfer costs without exposing the tasks to the public internet.

Which network routing configuration should the solutions architect recommend?

  1. Provision a gateway VPC endpoint for Amazon S3, and configure interface VPC endpoints for the Amazon ECR API and Docker registry in the VPC.Cevap
  2. B
    Configure interface VPC endpoints for the Amazon ECR API and Docker registry, while continuing to route S3-bound image layer downloads through the NAT Gateway.
  3. C
    Configure interface VPC endpoints for the Amazon ECR API, Docker registry, and Amazon S3.
  4. D
    Configure a VPC peering connection to a transit VPC containing an Internet Gateway, and route ECR traffic through the peering connection.

Cevap

Provision a gateway VPC endpoint for Amazon S3, and configure interface VPC endpoints for the Amazon ECR API and Docker registry in the VPC.
The correct solution uses interface VPC endpoints for the Amazon ECR API and registry services alongside a gateway VPC endpoint for Amazon S3. Amazon ECR hosts actual container image layers in Amazon S3. By using ECR interface endpoints, the private Fargate tasks communicate with the ECR control plane without internet exposure. By using an S3 gateway endpoint, the large image layers (representing the bulk of the 120 TB120\text{ TB} data transfer) are retrieved directly from S3 without passing through the NAT Gateway. This eliminates both the NAT Gateway processing fees and any PrivateLink data processing fees for the S3 traffic, achieving the lowest possible cost.

Adım Adım Çözüm

1
Identify the storage mechanism for Amazon ECR container images.
Amazon ECR stores the actual container image layers (the bulk of the data transfer) in Amazon S3 buckets, while control plane tasks use the ECR API.
Understanding where the data is stored determines how to route the traffic cost-effectively.
2
Evaluate the current NAT Gateway data transfer cost.
The current setup incurs NAT Gateway data processing charges of $0.045\$0.045 per GB for all 120 TB120\text{ TB} of data, totaling over $5400\$5\text{}400 per month.
Establishes the baseline cost to optimize.
3
Compare the cost profiles of VPC endpoint types for Amazon S3.
Gateway VPC endpoints for S3 are free of hourly and data processing charges. Interface VPC endpoints (PrivateLink) for S3 charge a processing fee of $0.01\$0.01 per GB.
Allows selecting the most cost-effective endpoint for the high-volume S3 traffic.
4
Combine the endpoints to form the final architecture.
Provisioning interface endpoints for ECR API/registry handles the control plane traffic, while the S3 gateway endpoint handles the 120 TB120\text{ TB} image layer download traffic for free.
Maximizes cost savings while maintaining private subnet communication.

Anahtar Kavram

VPC Endpoints for Cost Optimization
Bu soruyu puanla

Konular

Cost-Effective Network Routing and Data Transfer Optimization