SAP-C02 · Question #77
A team collects and routes behavioral data for an entire company. The company runs a Multi-AZ VPC environment with public subnets, private subnets, and in internet gateway Each public subnet also…
The correct answer is D. Add an interface VPC endpoint for Kinesis Data Streams to the VPC. VPC endpoint policies enable you to control access by either attaching a policy to a VPC endpoint or by using additional fields in a policy that is attached to an IAM user, group, or role to restrict access to only occur via the specified VPC endpoint…
Question
A team collects and routes behavioral data for an entire company. The company runs a Multi-AZ VPC environment with public subnets, private subnets, and in internet gateway Each public subnet also contains a NAT gateway Most of the company's applications read from and write to Amazon Kinesis Data Streams. Most of the workloads run in private subnets. A solutions architect must review the infrastructure The solutions architect needs to reduce costs and maintain the function of the applications. The solutions architect uses Cost Explorer and notices that the cost in the EC2-Other category is consistently high A further review shows that NatGateway- Bytes charges are increasing the cost in the EC2-Other category. What should the solutions architect do to meet these requirements?
Options
- AEnable VPC Flow Logs. Use Amazon Athena to analyze the logs for traffic that can be removed.
- BAdd an interface VPC endpoint for Kinesis Data Streams to the VPC.
- CEnable VPC Flow Logs and Amazon Detective.
- DAdd an interface VPC endpoint for Kinesis Data Streams to the VPC.
How the community answered
(18 responses)- A6% (1)
- B6% (1)
- C17% (3)
- D72% (13)
Explanation
VPC endpoint policies enable you to control access by either attaching a policy to a VPC endpoint or by using additional fields in a policy that is attached to an IAM user, group, or role to restrict access to only occur via the specified VPC endpoint. https://aws.amazon.com/premiumsupport/knowledge-center/vpc-reduce-nat-gateway-transfer-
Community Discussion
No community discussion yet for this question.