Soru

Zorluk: OrtaCost-Effective Network Routing and Data Transfer Optimization

A company has deployed a high-throughput reporting application on Amazon EC2 instances in a private subnet. The application queries and writes transaction records to an Amazon DynamoDB table in the same AWS Region. The network architecture currently routes all outbound traffic (0.0.0.0/00.0.0.0/0) from the private subnet through a NAT gateway. The company is seeking to reduce its monthly AWS bills, as the DynamoDB-related data transfer charges through the NAT gateway have become significant, totaling approximately 10 TB10\text{ TB} per month. Which architecture change will resolve the high data transfer costs at the lowest expense?

  1. A
    Deploy an interface VPC endpoint (AWS PrivateLink) for Amazon DynamoDB in the private subnet and update the application configuration.
  2. B
    Replace the NAT gateway with a self-managed NAT instance to eliminate NAT gateway data processing fees.
  3. Create a gateway VPC endpoint for Amazon DynamoDB and associate it with the route table of the private subnet.Cevap
  4. D
    Configure the DynamoDB table to use Provisioned Capacity Mode with auto scaling enabled to manage the increased request rate.

Cevap

Create a gateway VPC endpoint for Amazon DynamoDB and associate it with the route table of the private subnet.
The correct answer is to create a gateway VPC endpoint for Amazon DynamoDB and associate it with the private subnet's route table. Unlike interface endpoints or NAT gateways, gateway endpoints do not charge any hourly or data processing fees. Routing the 10 TB10\text{ TB} of monthly DynamoDB traffic directly through the gateway endpoint bypasses the NAT gateway, eliminating the high NAT gateway processing fees.

Adım Adım Çözüm

1
Analyze the source of the high monthly costs.
The application's queries and writes to Amazon DynamoDB total 10 TB10\text{ TB} per month and are routed through a NAT gateway, which incurs significant per-GB data processing fees.
Before proposing an architectural change, the exact resource causing the cost must be identified.
2
Evaluate private routing alternatives for Amazon DynamoDB.
Both gateway and interface VPC endpoints provide private routing to AWS services. Interface endpoints charge hourly and data processing fees, whereas gateway endpoints for DynamoDB are free.
Determining the cost structures of alternative routes helps identify the most cost-effective solution.
3
Configure the gateway VPC endpoint routing.
Creating a gateway VPC endpoint and linking it to the private subnet's route table forces all DynamoDB-destined traffic to route directly over the private AWS network at no cost, bypassing the NAT gateway.
Modifying the route table ensures that the application traffic automatically shifts to the free path.

Anahtar Kavram

Gateway VPC Endpoints provide free, private routing to Amazon S3 and Amazon DynamoDB, bypassing the NAT Gateway and eliminating data transfer processing charges.
Tahmini Süre:1m 30s
Bu soruyu puanla