nerdexam
Amazon

SAA-C03 · Question #468

A company wants to send data from its on-premises systems to Amazon S3 buckets. The company created the S3 buckets in three different accounts. The company must send the data privately without…

The correct answer is A. Establish a networking account in the AWS Cloud. Create a private VPC in the networking E. Establish a networking account in the AWS Cloud. Create a private VPC in the networking. To send data privately from on-premises to S3 buckets across multiple AWS accounts: A: Using AWS Direct Connect with a private virtual interface (VIF) enables private connectivity from on-premises into the VPC. E: After establishing the central VPC in a networking account, use…

Submitted by haru.x· Mar 4, 2026Design Secure Architectures

Question

A company wants to send data from its on-premises systems to Amazon S3 buckets. The company created the S3 buckets in three different accounts. The company must send the data privately without traveling across the internet. The company has no existing dedicated connectivity to AWS. Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

Options

  • AEstablish a networking account in the AWS Cloud. Create a private VPC in the networking
  • BEstablish a networking account in the AWS Cloud. Create a private VPC in the networking
  • CCreate an Amazon S3 interface endpoint in the networking account.
  • DCreate an Amazon S3 gateway endpoint in the networking account.
  • EEstablish a networking account in the AWS Cloud. Create a private VPC in the networking

How the community answered

(37 responses)
  • A
    54% (20)
  • B
    8% (3)
  • C
    14% (5)
  • D
    24% (9)

Explanation

To send data privately from on-premises to S3 buckets across multiple AWS accounts: A: Using AWS Direct Connect with a private virtual interface (VIF) enables private connectivity from on-premises into the VPC. E: After establishing the central VPC in a networking account, use VPC peering to allow access to S3 buckets across multiple AWS accounts. "Direct Connect private virtual interface (VIF) allows private IP connectivity to VPC resources." "VPC Peering enables routing of traffic between VPCs using private IP addresses." B: Public VIF sends traffic over public AWS services--not fully private. C: Interface endpoint is useful within a single account/VPC context. D: Gateway endpoint doesn't solve inter-account routing.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice