ANS-C01 · Question #26
A company is building its website on AWS in a single VPC. The VPC has public subnets and private subnets in two Availability Zones. The website has static content such as images. The company is…
The correct answer is D. Implement gateway VPC endpoints for Amazon S3. Update the VPC route table. To reduce data transfer charges for NAT gateways, you can use an interface endpoint or a gateway endpoint. https://repost.aws/knowledge-center/vpc-reduce-nat-gateway-transfer-costs If your NAT gateway charges are from traffic to Amazon S3 or Amazon DynamoDB in the same Region…
Question
A company is building its website on AWS in a single VPC. The VPC has public subnets and private subnets in two Availability Zones. The website has static content such as images. The company is using Amazon S3 to store the content. The company has deployed a fleet of Amazon EC2 instances as web servers in a private subnet. The EC2 instances are in an Auto Scaling group behind an Application Load Balancer. The EC2 instances will serve traffic, and they must pull content from an S3 bucket to render the webpages. The company is using AWS Direct Connect with a public VIF for on-premises connectivity to the S3 bucket. A network engineer notices that traffic between the EC2 instances and Amazon S3 is routing through a NAT gateway. As traffic increases, the company's costs are increasing. The network engineer needs to change the connectivity to reduce the NAT gateway costs that result from the traffic between the EC2 instances and Amazon S3. Which solution will meet these requirements?
Options
- ACreate a Direct Connect private VIF. Migrate the traffic from the public VIF to the private VIF.
- BCreate an AWS Site-to-Site VPN tunnel over the existing public VIF.
- CImplement interface VPC endpoints for Amazon S3. Update the VPC route table.
- DImplement gateway VPC endpoints for Amazon S3. Update the VPC route table.
How the community answered
(46 responses)- A11% (5)
- B17% (8)
- C4% (2)
- D67% (31)
Explanation
To reduce data transfer charges for NAT gateways, you can use an interface endpoint or a gateway endpoint. https://repost.aws/knowledge-center/vpc-reduce-nat-gateway-transfer-costs If your NAT gateway charges are from traffic to Amazon S3 or Amazon DynamoDB in the same Region, you should choose a gateway endpoint. There is no additional charge for using gateway endpoints. On the other hand, An interface endpoint charges apply for each Gigabyte processed through the endpoint. https://docs.aws.amazon.com/vpc/latest/privatelink/gateway-endpoints.html https://docs.aws.amazon.com/vpc/latest/privatelink/what-is-privatelink.html https://aws.amazon.com/privatelink/pricing/
Topics
Community Discussion
No community discussion yet for this question.