Examkin

Soru

Zorluk: OrtaCost-Effective Network Routing and Data Transfer Optimization

A media company hosts a video transcoding application on Amazon EC2 instances located in a private subnet. The application downloads high-definition video files from an Amazon S3 bucket, transcodes them, and uploads the processed files back to the same S3 bucket. The application processes approximately 15 TB15\text{ TB} of raw video data daily. Currently, the EC2 instances access Amazon S3 through a NAT Gateway. A solutions architect needs to redesign the network routing to reduce data transfer costs. Which solution is the most cost-effective way to meet these requirements?

  1. Create a Gateway VPC endpoint for Amazon S3 in the VPC and associate it with the route tables of the private subnet.Cevap
  2. B
    Keep the existing NAT Gateway and configure a NAT Instance in the public subnet to handle the S3 traffic.
  3. C
    Establish an AWS Site-to-Site VPN connection and route all S3 traffic through the on-premises network gateway.
  4. D
    Move the S3 bucket's data to the Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage class to lower overall costs.

Cevap

Create a Gateway VPC endpoint for Amazon S3 in the VPC and associate it with the route tables of the private subnet.
Creating a Gateway VPC endpoint for Amazon S3 allows instances in the private subnet to access S3 directly over the AWS network without traversing the NAT Gateway. Gateway endpoints do not incur any hourly or data processing charges, making this the most cost-effective and secure routing option.

Adım Adım Çözüm

1
Analyze the current traffic pattern and identify that the EC2 instances in a private subnet are downloading 15 TB15\text{ TB} of data daily from Amazon S3 through a NAT Gateway.
Identify that NAT Gateway data processing charges (0.045 USD0.045\text{ USD} per GB) for 15 TB15\text{ TB} daily represent a significant and avoidable cost.
Traffic destined for AWS services like S3 or DynamoDB should not be routed through a NAT Gateway if a free alternative exists.
2
Evaluate alternative routing mechanisms that provide private connectivity to Amazon S3.
Compare Gateway VPC endpoints and Interface VPC endpoints.
Gateway VPC endpoints are free and do not charge for data processing, unlike Interface VPC endpoints or NAT Gateways.
3
Select and configure the Gateway VPC endpoint by adding it to the route tables of the private subnet.
Route table rules are updated so that traffic destined for S3 (via prefix lists) bypasses the NAT Gateway and goes directly through the VPC endpoint.
This removes the NAT Gateway data processing charges for S3 traffic entirely while keeping the traffic within the AWS private network.

Anahtar Kavram

Gateway VPC Endpoints for S3 eliminate NAT Gateway data processing charges for traffic between private EC2 instances and S3.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Cost-Effective Network Routing and Data Transfer Optimization