ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam
Go to Exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 821 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03
Question #: 821
Topic #: 1
[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company uses Salesforce. The company needs to load existing data and ongoing data changes from Salesforce to Amazon Redshift for analysis. The company does not want the data to travel over the public internet.

Which solution will meet these requirements with the LEAST development effort?

  • A. Establish a VPN connection from the VPC to Salesforce. Use AWS Glue DataBrew to transfer data.
  • B. Establish an AWS Direct Connect connection from the VPC to Salesforce. Use AWS Glue DataBrew to transfer data.
  • C. Create an AWS PrivateLink connection in the VPC to Salesforce. Use Amazon AppFlow to transfer data.
  • D. Create a VPC peering connection to Salesforce. Use Amazon AppFlow to transfer data.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Kaula at March 23, 2024, 2:07 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
LeonSauveterre
6 months ago
Selected Answer: C
A - VPN connection, public internet, no. B - Significant setup effort and cost. Also, DataBrew is not suitable for loading ongoing data changes. C - Amazon AppFlow is a fully managed integration service that natively supports Salesforce and Amazon Redshift. D - VPC peering is for connecting two AWS VPCs. Salesforce is external to AWS, so no.
upvoted 3 times
LeonSauveterre
6 months ago
Also, maybe this will help you along the way (things after "==>" are their disadvantages): 1. VPN Connection: For secure, encrypted traffic between on-premises and AWS over the public internet. ==> Relies on public internet (higher latency) 2. Direct Connect: For dedicated private network connectivity between on-premises and AWS (like data centers with large workloads). ==> Higher cost, longer setup time. 3. PrivateLink: For secure private connectivity to AWS services or third-party services (like Salesforce) within AWS. ==> Simple setup but limited to services configured with PrivateLink (not general connectivity). 4. VPC Peering: For direct connectivity between two AWS VPCs (like multi-account or region scenarios). ==> Does not support transitive connections; not suitable for external services like Salesforce.
upvoted 2 times
...
...
mk168898
8 months, 1 week ago
3rd party SaaS salesforce integration => Use AWS AppFlow So left C and D Not D because VPC Peering need 2 VPC and 3rd party SaaS does not have a VPC
upvoted 2 times
...
MatAlves
9 months, 1 week ago
Selected Answer: C
AWS PrivateLink: This service enables private connectivity between VPCs and supported AWS services, effectively keeping data off the public internet. It allows secure communication without exposing your data to the internet. Amazon AppFlow: This is a fully managed integration service that simplifies data transfer between SaaS applications (like Salesforce) and AWS services (like Amazon Redshift).
upvoted 2 times
...
Johnoppong101
10 months, 2 weeks ago
Selected Answer: C
C is the answer
upvoted 2 times
...
KennethNg923
1 year ago
Selected Answer: C
Private link for sure
upvoted 2 times
...
Scheldon
1 year ago
Selected Answer: C
AnswerC To connect your own VPC with third-party VPC we need to use ProvateLink. AWS PrivateLink is a highly available, scalable technology that you can use to privately connect your VPC to services as if they were in your VPC. You do not need to use an internet gateway, NAT device, public IP address, AWS Direct Connect connection, or AWS Site-to-Site VPN connection to allow communication with the service from your private subnets. Therefore, you control the specific API endpoints, sites, and services that are reachable from your VPC. https://docs.aws.amazon.com/vpc/latest/privatelink/what-is-privatelink.html
upvoted 4 times
...
Kaula
1 year, 2 months ago
Selected Answer: C
Should be C
upvoted 2 times
...
Kaula
1 year, 3 months ago
C https://docs.aws.amazon.com/connect/latest/adminguide/integrate-salesforce-tasks.html https://docs.aws.amazon.com/connect/latest/adminguide/vpc-interface-endpoints.html
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel