SAP-C02 · Question #776
A company operates a static content distribution platform that serves customers globally. The customers consume content from their own AWS accounts. The company serves its content from an Amazon S3 bu
The correct answer is A. Implement S3 Multi-Region Access Points E. Use AWS PrivateLink and AWS Direct Connect to connect to a Multi-Region Access Point.. The company needs to distribute static content globally from the nearest AWS Region while ensuring on-premises content uploads to S3 occur with minimal latency and no public internet exposure, all with low operational overhead.
Question
A company operates a static content distribution platform that serves customers globally. The customers consume content from their own AWS accounts. The company serves its content from an Amazon S3 bucket. The company uploads the content from its on-premises environment to the S3 bucket by using an S3 File Gateway. The company wants to improve the platform's performance and reliability by serving content from the AWS Region that is geographically closest to customers. The company must route the on- premises data to Amazon S3 with minimal latency and without public internet exposure. Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose two.)
Options
- AImplement S3 Multi-Region Access Points
- BUse S3 Cross-Region Replication (CRR) to copy content to different Regions
- CCreate an AWS Lambda function that tracks the routing of clients to Regions
- DUse an AWS Site-to-Site VPN connection to connect to a Multi-Region Access Point.
- EUse AWS PrivateLink and AWS Direct Connect to connect to a Multi-Region Access Point.
How the community answered
(18 responses)- A61% (11)
- B11% (2)
- C22% (4)
- D6% (1)
Why each option
The company needs to distribute static content globally from the nearest AWS Region while ensuring on-premises content uploads to S3 occur with minimal latency and no public internet exposure, all with low operational overhead.
Option A, S3 Multi-Region Access Points, provides a single global endpoint for customers to access content from the nearest S3 bucket, automatically handling replication and routing for global performance and reliability.
S3 Cross-Region Replication (CRR) provides multi-region data availability but does not inherently offer a single global endpoint for low-latency client routing, which S3 Multi-Region Access Points (A) do.
Creating a Lambda function for custom client routing adds significant operational overhead, as S3 Multi-Region Access Points provide this functionality as a managed service.
AWS Site-to-Site VPN, while providing private connectivity, generally offers higher latency and lower bandwidth than AWS Direct Connect, and doesn't explicitly guarantee access to Multi-Region Access Points without additional VPC endpoint configurations.
Option E, using AWS PrivateLink and AWS Direct Connect, establishes a dedicated, private, low-latency network connection from on-premises to the S3 Multi-Region Access Point, fulfilling the requirement for secure uploads without public internet exposure.
Concept tested: Global content distribution, private connectivity to S3, S3 Multi-Region Access Points
Source: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointBenefits.html
Community Discussion
No community discussion yet for this question.