SAA-C03 · Question #656
A company is building a static website on AWS in a single VPC. The VPC has public subnets and private subnets in two Availability Zones. The company stores the website content in an Amazon S3 bucket.
The correct answer is D. Implement gateway VPC endpoints for the S3 bucket. Update the VPC route table.. Traffic from the EC2 instances in private subnets to S3 is currently going through the NAT gateway, incurring unnecessary data processing charges. By creating a gateway VPC endpoint for Amazon S3 and updating the route tables so that S3 traffic goes through the endpoint, traffic
Question
A company is building a static website on AWS in a single VPC. The VPC has public subnets and private subnets in two Availability Zones. The company stores the website content in an Amazon S3 bucket. The company has deployed a fleet of Amazon EC2 instances as web servers in a private subnet. The EC2 instances are in an Auto Scaling group behind an Application Load Balancer (ALB). The EC2 instances serve network traffic and pull content from the S3 bucket to render the webpages. The company is using an AWS Direct Connect connection with a public virtual interface (VIF) to provide on-premises connectivity to the S3 bucket. Network traffic between the EC2 instances and the S3 bucket travels through a NAT gateway. A solutions architect must reconfigure network connectivity to optimize the cost of NAT gateway traffic between the EC2 instances and the S3 bucket. Which solution will meet these requirements?
Options
- ACreate a Direct Connect private VIF. Migrate the traffic from the public VIF to the private VIF.
- BCreate an AWS Site-to-Site VPN tunnel over the existing public VIF.
- CImplement interface VPC endpoints for the S3 bucket Update the VPC route table.
- DImplement gateway VPC endpoints for the S3 bucket. Update the VPC route table.
How the community answered
(25 responses)- A16% (4)
- B4% (1)
- C8% (2)
- D72% (18)
Explanation
Traffic from the EC2 instances in private subnets to S3 is currently going through the NAT gateway, incurring unnecessary data processing charges. By creating a gateway VPC endpoint for Amazon S3 and updating the route tables so that S3 traffic goes through the endpoint, traffic between the EC2 instances and S3 stays within the AWS network and bypasses the NAT gateway, eliminating those NAT costs. Gateway endpoints for S3 are highly available and have no additional hourly or data processing charges.
Community Discussion
No community discussion yet for this question.