An organization runs a data processing application on Amazon EC2 instances in a private subnet within the us-east-1 Region. Every day, the application writes of processed analytics data directly to an Amazon S3 bucket located in the us-west-2 Region. Currently, the private subnet's route table sends all internet-bound traffic () through a NAT Gateway in a public subnet. The organization wants to modify the architecture to minimize data transfer costs. Which solution will reduce the data transfer costs the most?
- Provision a local Amazon S3 bucket in the us-east-1 Region and create an S3 Gateway VPC Endpoint in the VPC. Configure the application to write data to the local bucket, and enable S3 Cross-Region Replication (CRR) to replicate the files to the bucket in us-west-2.Cevap
- BCreate an S3 Gateway VPC Endpoint in the us-east-1 VPC, and associate it with the private subnet's route table. Update the application to write directly to the S3 bucket in us-west-2 using the gateway endpoint's public DNS name.
- CCreate an S3 Interface VPC Endpoint (AWS PrivateLink) in the private subnet in us-east-1. Configure the application to route the cross-region S3 traffic through the interface endpoint to reach the bucket in us-west-2.
- DEstablish an AWS Site-to-Site VPN connection from the VPC in us-east-1 to the S3 endpoint in us-west-2. Update the private subnet's route table to route S3 traffic through the VPN gateway.
Cevap
Provision a local Amazon S3 bucket in the us-east-1 Region, create an S3 Gateway VPC Endpoint, write data locally, and use S3 Cross-Region Replication (CRR) to replicate the files to the bucket in us-west-2.
The correct option is to write data to a local S3 bucket in us-east-1 via a Gateway VPC Endpoint, and then use S3 Cross-Region Replication (CRR) to copy it to us-west-2. S3 Gateway Endpoints are free of charge but only route traffic to S3 buckets in the same Region. Writing to a local bucket via the Gateway Endpoint completely bypasses the NAT Gateway processing fees ( 0.02 per GB) and avoiding any NAT Gateway charges.
Adım Adım Çözüm
Anahtar Kavram
S3 Gateway Endpoints are region-specific and free of charge. To avoid NAT Gateway charges for cross-region S3 transfers, data should be written to a local bucket via a Gateway Endpoint and replicated to the destination region using S3 Cross-Region Replication (CRR).
Tahmini Süre:2m 0s