A company is designing a new multi-tier application on AWS. The application workloads will be deployed across two Availability Zones in private subnets within a single VPC. The instances in the private subnets require outbound internet access to download software updates, but they must not receive inbound connections from the internet. The network design must be highly available and resilient to Availability Zone failures. Which of the following actions should the Solutions Architect take to meet these requirements? (Select TWO.)
- Deploy a NAT Gateway in the public subnet of each Availability Zone.Cevap
- BDeploy a single NAT Gateway in a public subnet in one Availability Zone, and route outbound traffic from both private subnets to this NAT Gateway.
- Create a route in the route table of each private subnet that directs outbound traffic (0.0.0.0/0) to the NAT Gateway in the same Availability Zone.Cevap
- DDeploy an AWS Transit Gateway to route outbound internet traffic from the private subnets directly to an Internet Gateway attached to the Transit Gateway.
- ECreate a Route 53 Private Hosted Zone for the external software update endpoints and associate it with the private subnets to resolve external routing.
Cevap
To design a highly available outbound internet connectivity solution, deploy a NAT Gateway in the public subnet of each Availability Zone, and configure the private subnet route tables to direct outbound traffic to their respective local NAT Gateway.
To achieve high availability and zone resilience, a NAT Gateway must be deployed in the public subnet of each Availability Zone, and the route tables for the private subnets must be configured to point to their local NAT Gateway. This ensures that a failure in one Availability Zone does not impact the outbound connectivity of instances in the remaining active Availability Zone.
Adım Adım Çözüm
Anahtar Kavram
Deploying multi-AZ NAT Gateways for highly available, resilient outbound network address translation.