DEA-C01 · Question #132
A company uses an AWS Lambda function to transfer files from a legacy SFTP environment to Amazon S3 buckets. The Lambda function is VPC enabled to ensure that all communications between the Lambda…
The correct answer is B. Create a VPC gateway endpoint for Amazon S3. Route network traffic to the VPC gateway. While interface endpoints is a viable solution, it can be more complex and expensive compared to a gateway endpoint. VPC interface endpoints charge per hour and per gigabyte of data
Question
A company uses an AWS Lambda function to transfer files from a legacy SFTP environment to Amazon S3 buckets. The Lambda function is VPC enabled to ensure that all communications between the Lambda function and other AVS services that are in the same VPC environment will occur over a secure network. The Lambda function is able to connect to the SFTP environment successfully. However, when the Lambda function attempts to upload files to the S3 buckets, the Lambda function returns timeout errors. A data engineer must resolve the timeout issues in a secure way. Which solution will meet these requirements in the MOST cost-effective way?
Options
- ACreate a NAT gateway in the public subnet of the VPC. Route network traffic to the NAT gateway.
- BCreate a VPC gateway endpoint for Amazon S3. Route network traffic to the VPC gateway
- CCreate a VPC interface endpoint for Amazon S3. Route network traffic to the VPC interface
- DUse a VPC internet gateway to connect to the internet. Route network traffic to the VPC internet
How the community answered
(27 responses)- A7% (2)
- B81% (22)
- C7% (2)
- D4% (1)
Explanation
While interface endpoints is a viable solution, it can be more complex and expensive compared to a gateway endpoint. VPC interface endpoints charge per hour and per gigabyte of data
Topics
Community Discussion
No community discussion yet for this question.