Examkin

Soru

Zorluk: OrtaCost-Effective Network Routing and Data Transfer Optimization

An enterprise operates a data processing application deployed on Amazon EC2 instances in private subnets within an application VPC. The application needs to transfer 100 TB100\text{ TB} of data monthly to a central database VPC located in the same AWS Region. Additionally, the EC2 instances must upload 80 TB80\text{ TB} of processed log files monthly to an Amazon S3 bucket. Currently, both the database VPC traffic and the S3 traffic are routed through an AWS Transit Gateway and a NAT Gateway. A solutions architect needs to optimize the network architecture to minimize data transfer charges. Which two actions should the solutions architect recommend to meet these requirements most cost-effectively? (Select TWO.)

  1. Establish a VPC Peering connection between the application VPC and the database VPC, and update the route tables to route database traffic through the peering connection.Cevap
  2. Create a Gateway VPC Endpoint for Amazon S3 in the application VPC, and associate it with the private subnet route tables to direct S3 traffic.Cevap
  3. C
    Replace the NAT Gateway with an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3 to handle the log uploads.
  4. D
    Deploy an AWS Site-to-Site VPN connection between the application VPC and the database VPC to secure and route the database traffic.
  5. E
    Assign public IP addresses to the EC2 instances and configure them to transfer the data directly to the database VPC and Amazon S3 over the public internet.

Cevap

Establish a VPC Peering connection between the application VPC and the database VPC to route database traffic, and create a Gateway VPC Endpoint for Amazon S3 in the application VPC to route S3 traffic.
Establishing a VPC Peering connection enables direct routing between the application and database VPCs without incurring the data processing fees of AWS Transit Gateway. Creating a Gateway VPC Endpoint for Amazon S3 directs the log upload traffic directly to S3 without traversing the NAT Gateway, eliminating the NAT Gateway data processing and hourly charges.

Adım Adım Çözüm

1
Analyze database VPC data transfer costs
Database traffic (100 TB100\text{ TB}) currently routes over AWS Transit Gateway, which charges a processing fee of 0.02 USD0.02\text{ USD} per GB\text{GB}. Routing via VPC Peering charges 0 USD0\text{ USD} for data processing and uses the standard underlying network topology.
Identify the most cost-effective connection type between the application VPC and the database VPC.
2
Analyze S3 upload data transfer costs
S3 uploads (80 TB80\text{ TB}) currently route through a NAT Gateway, which charges a processing fee of 0.045 USD0.045\text{ USD} per GB\text{GB} in addition to hourly charges. Setting up a Gateway VPC Endpoint is free and routes the traffic directly to S3.
Identify the most cost-effective endpoint type for routing S3 traffic from private subnets.

Anahtar Kavram

AWS Data Transfer Cost Optimization using VPC Peering and Gateway Endpoints
Bu soruyu puanla

Konular

Cost-Effective Network Routing and Data Transfer Optimization