A company runs a batch processing application on Amazon EC2 instances located in private subnets within a VPC in the `us-east-1` Region. The application downloads of data monthly from an Amazon S3 bucket located in the same Region. Currently, all outbound traffic from the private subnets is routed through a NAT Gateway, which results in significant NAT Gateway data processing charges. The company wants to eliminate these data processing charges for the Amazon S3 traffic while maintaining the existing subnet architecture. Which network configuration change is the most cost-effective solution?
- Configure a VPC gateway endpoint for Amazon S3 and associate it with the route tables of the private subnets.Cevap
- BDeploy an additional NAT Gateway in a second Availability Zone and update the route tables to distribute the Amazon S3 data transfer load.
- CRoute all Amazon S3 traffic through an AWS Transit Gateway to a centralized VPC that hosts an Interface VPC endpoint for Amazon S3.
- DPurchase an EC2 Instance Savings Plan to cover the NAT Gateway data processing charges.
Cevap
Configure a VPC gateway endpoint for Amazon S3 and associate it with the route tables of the private subnets.
Configuring a VPC gateway endpoint for Amazon S3 is the most cost-effective solution. Gateway endpoints are provided at no additional cost (no hourly or data processing charges) and allow instances in private subnets to securely connect to S3 within the same Region, completely bypassing the NAT Gateway and eliminating its data processing charges.
Adım Adım Çözüm
Anahtar Kavram
Bypassing NAT Gateway data processing costs for Amazon S3 traffic by utilizing free VPC Gateway Endpoints.