A financial services startup runs a real-time portfolio analysis platform on Amazon EC2 instances in a private subnet of a VPC in us-east-1. The application processes and ingests of historical market data daily from an Amazon S3 bucket in the same region. It also sends of daily transaction logs to a log ingestion service hosted in another VPC in us-east-1 owned by a parent company. Currently, all egress traffic is routed through a NAT Gateway. Which two architectural modifications should the solutions architect implement to achieve the most cost-effective network routing? (Select TWO.)
- Create a Gateway VPC Endpoint for Amazon S3 in the application's VPC and associate it with the private subnet's route table.Cevap
- Establish a VPC Peering connection between the application VPC and the log ingestion VPC, and update the route tables to route log traffic through the peering connection.Cevap
- CDeploy an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3 in the application's VPC.
- DDeploy an AWS Transit Gateway to connect the application VPC and the log ingestion VPC, and route log traffic through the Transit Gateway.
- EProvision a NAT Instance in the public subnet of the application VPC to route both S3 and log traffic.
Cevap
Creating a Gateway VPC Endpoint for Amazon S3 and establishing a VPC Peering connection for cross-VPC log traffic.
Creating a Gateway VPC Endpoint for Amazon S3 is free of charge and routes traffic directly to S3 within the same region, completely eliminating NAT Gateway data processing fees for the 50 TB daily ingestion. Establishing a VPC Peering connection within the same region avoids NAT Gateway data processing charges for the 10 TB of daily log traffic, charging only standard intra-region data transfer fees if crossing Availability Zones.
Adım Adım Çözüm
Anahtar Kavram
Cost-Effective Network Routing and Data Transfer Optimization