A retail company runs a containerized microservices application on Amazon ECS (Fargate) ac… — AWS Certified Solutions Architect - Associate

A retail company runs a containerized microservices application on Amazon ECS (Fargate) across three Availability Zones in a VPC. The Fargate tasks are located in private subnets and need to perform the following operations:

- Retrieve $120\text{ TB}$ of product catalog assets per month from an Amazon S3 bucket in the same AWS Region.
- Synchronize transaction logs (totaling $60\text{ TB}$ per month) with a database cluster hosted in another VPC belonging to a subsidiary in the same Region.

Currently, a NAT Gateway in a public subnet handles all outbound traffic for the private subnets. A solutions architect needs to redesign the network routing to reduce the monthly data transfer charges.

Which combination of actions should the solutions architect implement to achieve the most cost-effective solution? (Select TWO.)

Configure an Amazon S3 gateway VPC endpoint and reference it in the private subnet route tables.Cevap
Set up a VPC peering connection between the two VPCs and direct the log synchronization traffic through it using private route table entries.Cevap
C
Provision an interface VPC endpoint (AWS PrivateLink) for Amazon S3 and update the Fargate task configuration.
D
Implement an AWS Transit Gateway to bridge the two VPCs and route the transaction traffic through the transit hub.
E
Maintain the existing route tables and request Elastic IPs for the Fargate tasks to route traffic using public IP addressing.

Cevap

The correct options are to configure an Amazon S3 gateway VPC endpoint and set up a VPC peering connection between the two VPCs.

The correct solution involves deploying a gateway VPC endpoint for S3 and establishing a VPC peering connection. The gateway endpoint for S3 is free and routes S3 traffic directly over the internal AWS backbone, completely bypassing the NAT Gateway and saving

120\text{ TB}

of NAT Gateway data processing fees. The VPC peering connection is also free to set up and does not incur data processing fees for traffic within the same AWS Region, routing the database synchronization logs directly via private IPs and bypassing the NAT Gateway.

Adım Adım Çözüm

Analyze the data transfer volumes and current routing architecture.

Identified two high-volume traffic patterns traversing the NAT Gateway:

120\text{ TB}

S3 download traffic and

60\text{ TB}

inter-VPC database replication traffic.

Understanding the cost breakdown of the current setup ($0.045 per GB for NAT Gateway processing) highlights the areas where optimization yields the highest savings.

Select the most cost-effective option for Amazon S3 access.

An S3 gateway VPC endpoint is selected because it is free of charge, unlike the current NAT Gateway path or an S3 interface VPC endpoint (which costs $0.01 per GB).

Using the free gateway endpoint completely eliminates the NAT Gateway data processing charges for the

120\text{ TB}

S3 traffic.

Select the most cost-effective option for inter-VPC database replication traffic.

A VPC peering connection is selected because it has no hourly attachment fees and no data processing charges within the same AWS Region.

VPC peering routes traffic directly between the VPCs using private IPs, avoiding the

0.045 per GB NAT Gateway fee and the

0.02 per GB Transit Gateway fee.

Anahtar Kavram

Minimizing AWS data transfer costs by bypassing NAT Gateways and Transit Gateways using free Gateway VPC Endpoints for Amazon S3 and direct VPC Peering for inter-VPC traffic.

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular