An application running on Amazon EC2 instances in a private subnet frequently downloads large datasets from an Amazon S3 bucket in the same AWS Region. The subnet routes all outbound internet traffic through a NAT Gateway. A SysOps administrator notices high NAT Gateway data processing charges on the monthly AWS bill. Which action should the administrator take to eliminate these data processing charges in the most cost-effective manner?
- Create a Gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.Cevap
- BCreate a Gateway VPC endpoint for Amazon S3 but do not modify the route tables of the private subnet.
- CProvision an Interface VPC endpoint for Amazon S3 and update the application to use the endpoint's private DNS name.
- DDeploy a second NAT Gateway in a different Availability Zone and distribute the S3 traffic across both gateways.
Cevap
Create a Gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet.
The correct answer is to create a Gateway VPC endpoint for Amazon S3 and associate it with the route table of the private subnet. Gateway VPC endpoints for Amazon S3 are free and do not incur data processing or hourly charges. Associating the endpoint with the route table of the private subnet ensures that any outbound traffic destined for S3 bypasses the default NAT Gateway route and is directed to the endpoint instead, eliminating NAT Gateway data processing charges.
Adım Adım Çözüm
Anahtar Kavram
Gateway VPC Endpoints for S3 cost optimization