Topic 1 Question 860
A solutions architect is creating an application. The application will run on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC. The EC2 instances will frequently access large files that contain confidential information. These files are stored in Amazon S3 buckets for processing. The solutions architect must optimize the network architecture to minimize data transfer costs.
What should the solutions architect do to meet these requirements?
Create a gateway endpoint for Amazon S3 in the VPC. In the route tables for the private subnets, add an entry for the gateway endpoint.
Create a single NAT gateway in a public subnet. In the route tables for the private subnets, add a default route that points to the NAT gateway.
Create an AWS PrivateLink interface endpoint for Amazon S3 in the VPIn the route tables for the private subnets, add an entry for the interface endpoint.
Create one NAT gateway for each Availability Zone in public subnets. In each of the route tables for the private subnets, add a default route that points to the NAT gateway in the same Availability Zone.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: A
AnswerA
I think only option A have any sense. It is cheap (no cost), it is secure (traffic is not going to public network). https://docs.aws.amazon.com/vpc/latest/privatelink/gateway-endpoints.html
👍 3Scheldon2024/12/03 - 正解だと思う選択肢: A
A- gateway endpoint for S3
👍 2Awsbeginner872024/10/03 - 正解だと思う選択肢: A
Gateway endpoint will minimize data transfer costs
👍 2Tanidanindo2024/10/08
シャッフルモード