Examkin

Soru

Zorluk: Çok zorManaging Storage and Data Transfer Costs

An enterprise operates a high-throughput data analytics platform on AWS in the `us-east-1` Region. The architecture consists of a production VPC (`VPC-Prod`) spanning three Availability Zones (AZ-a, AZ-b, and AZ-c) containing a fleet of Amazon EC2 instances in private subnets. These instances upload approximately 300 TB300\text{ TB} of raw data monthly to an Amazon S3 bucket located in the same Region. Currently, the EC2 instances route all outbound internet and S3 traffic through NAT Gateways deployed in each AZ.

Additionally, the EC2 instances perform daily synchronization tasks with a shared PostgreSQL database cluster hosted in a central services VPC (`VPC-Shared`) in `us-east-1`. This database synchronization transfers 150 TB150\text{ TB} of data monthly. Currently, this traffic is routed through an AWS Transit Gateway, with the Transit Gateway attachment configured only in a single subnet in AZ-a within `VPC-Prod`.

A Solutions Architect needs to optimize the architecture to achieve the maximum possible reduction in data transfer and processing costs without compromising availability or security.

Which combination of actions should the Solutions Architect take to meet these requirements? (Select TWO.)

  1. Create an Amazon S3 Gateway VPC Endpoint in `VPC-Prod`, and associate it with the route tables of the private subnets containing the EC2 instances.Cevap
  2. Establish a VPC Peering connection between `VPC-Prod` and `VPC-Shared`, update the route tables to route the database synchronization traffic over the peering connection, and configure the application to resolve the database endpoints to local Availability Zone IP addresses.Cevap
  3. C
    Deploy an S3 Interface VPC Endpoint (AWS PrivateLink) in each Availability Zone of `VPC-Prod`, and update the private subnet route tables to target the interface endpoints.
  4. D
    Configure Transit Gateway attachments in `VPC-Prod` across all three Availability Zones, and enable Appliance Mode on the Transit Gateway to load-balance traffic and eliminate cross-AZ charges.
  5. E
    Use AWS Resource Access Manager (RAM) to share the database network interfaces from `VPC-Shared` to `VPC-Prod`, routing traffic locally within the subnets of `VPC-Prod`.
  6. F
    Establish an AWS Direct Connect gateway with a Transit Virtual Interface (VIF) between `VPC-Prod` and `VPC-Shared` to bypass the Transit Gateway data processing charges.

Cevap

To optimize storage and data transfer costs, the Solutions Architect should create an Amazon S3 Gateway VPC Endpoint in the production VPC to bypass NAT Gateways for S3 uploads, and establish a VPC Peering connection between the production and shared services VPCs with local Availability Zone routing for the database synchronization traffic.
The correct solution uses an Amazon S3 Gateway VPC Endpoint to bypass the NAT Gateways for the S3 upload traffic, saving the $0.045 per GB\$0.045\text{ per GB} processing charge (about $13,500 monthly\$13,500\text{ monthly}). For the database synchronization traffic, establishing a VPC Peering connection bypasses the Transit Gateway's $0.02 per GB\$0.02\text{ per GB} data processing charge (saving $3,000 monthly\$3,000\text{ monthly}). Routing the database traffic locally within the same Availability Zone over the VPC Peering connection ensures that no inter-AZ data transfer charges are incurred, removing the remaining routing costs.

Adım Adım Çözüm

1
Calculate the NAT Gateway processing costs for the S3 upload traffic.
300 TB300\text{ TB} of data uploads monthly through NAT Gateways costs $13,500\$13,500 in processing fees (300,000 GB×$0.045/GB300,000\text{ GB} \times \$0.045/\text{GB}).
To identify the largest cost driver in S3 data transfer.
2
Identify a free replacement for the S3 NAT Gateway path.
Creating an S3 Gateway VPC Endpoint provides a free route that bypasses NAT Gateways completely.
To eliminate the $13,500\$13,500 monthly processing cost.
3
Analyze the Transit Gateway data processing and routing costs for the database synchronization.
150 TB150\text{ TB} of data routed through Transit Gateway costs $3,000\$3,000 in processing fees (150,000 GB×$0.02/GB150,000\text{ GB} \times \$0.02/\text{GB}) plus approximately $1,000\$1,000 in cross-AZ transfer charges due to the single-AZ attachment.
To evaluate the financial impact of the database synchronization routing.
4
Replace the Transit Gateway routing for high-volume database traffic with a free peering alternative.
Establishing a VPC Peering connection removes the processing fee entirely, and local AZ routing makes intra-AZ traffic free, saving $4,000\$4,000 monthly.
To achieve the maximum possible reduction in VPC-to-VPC data transfer costs.

Anahtar Kavram

Optimizing data transfer costs using S3 Gateway VPC Endpoints instead of NAT Gateways, and using VPC Peering instead of Transit Gateway for high-volume intra-Region VPC-to-VPC traffic.
Bu soruyu puanla

Konular

Managing Storage and Data Transfer Costs