A telemetry processing system runs on Amazon EC2 instances deployed inside a private subnet. The application continuously ingests sensor data, writes the processed results to an Amazon DynamoDB table, and archives raw payloads in an Amazon S3 bucket. Currently, all traffic to these services passes through a NAT Gateway, leading to high data processing costs.
Which TWO configurations should a solutions architect implement to minimize these network costs? (Select TWO.)
- Create a gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.Cevap
- Create a gateway VPC endpoint for Amazon DynamoDB and associate it with the route table of the private subnet.Cevap
- CCreate an interface VPC endpoint for Amazon S3 to bypass the NAT Gateway.
- DCreate an interface VPC endpoint for Amazon DynamoDB to bypass the NAT Gateway.
- ESet up an AWS Transit Gateway to route the S3 and DynamoDB traffic directly.
Cevap
Create a gateway VPC endpoint for Amazon S3 and a gateway VPC endpoint for Amazon DynamoDB, then associate both with the route table of the private subnet.
The correct choices are the configurations that establish gateway VPC endpoints for Amazon S3 and Amazon DynamoDB and associate them with the private subnet's route table. Gateway VPC endpoints are provided by AWS at no additional cost and do not charge for data transfer or data processing. By routing traffic directly through these endpoints, the EC2 instances bypass the NAT Gateway, eliminating the NAT Gateway data processing fees.
Adım Adım Çözüm
Anahtar Kavram
Gateway VPC Endpoints for S3 and DynamoDB provide a zero-cost routing mechanism to access these services privately from a VPC, bypassing NAT Gateways.
Tahmini Süre:1m 30s