Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 839 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 839
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company runs an AWS Lambda function in private subnets in a VPC. The subnets have a default route to the internet through an Amazon EC2 NAT instance. The Lambda function processes input data and saves its output as an object to Amazon S3.

Intermittently, the Lambda function times out while trying to upload the object because of saturated traffic on the NAT instance's network. The company wants to access Amazon S3 without traversing the internet.

Which solution will meet these requirements?

A. Replace the EC2 NAT instance with an AWS managed NAT gateway.
B. Increase the size of the EC2 NAT instance in the VPC to a network optimized instance type.
C. Provision a gateway endpoint for Amazon S3 in the VPUpdate the route tables of the subnets accordingly.
D. Provision a transit gateway. Place transit gateway attachments in the private subnets where the Lambda function is running.

Show Suggested Answer

Suggested Answer: C 🗳️

by hpmargathia at April 1, 2024, 6:31 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

mk168898

8 months, 1 week ago

without internet => gateway endpoints

upvoted 3 times

...

Scheldon

1 year ago

Selected Answer: C

Answer C "The company wants to access Amazon S3 without traversing the internet." so we cannot use any NAT like in answer A & B. Transit Gateways is allowing reach Direct Connect or VPN connection from VPC. Hence C need to be a good answer

upvoted 4 times

...

boubie44

1 year, 1 month ago

why not D? i don't understand

upvoted 2 times

DanielWuTRT

1 year ago

Complexity and cost are high and too complicated for scenarios where only S3 access is required.

upvoted 2 times

...

waldirlsantos

1 year, 2 months ago

Selected Answer: C

The Key words are "Without traversig the internet". So, the awser is C. https://docs.aws.amazon.com/pt_br/vpc/latest/privatelink/gateway-endpoints.html

upvoted 4 times

...

AlvinC2024

1 year, 2 months ago

Selected Answer: C

By provisioning a gateway endpoint for Amazon S3 in the VPC, you enable the Lambda function running in the private subnets to access S3 directly without needing to go through the NAT instance or traverse the internet. This solution helps alleviate the network congestion issue and reduces latency since the traffic between Lambda and S3 stays within the AWS network. Additionally, updating the route tables of the subnets to route S3 traffic through the gateway endpoint ensures that the Lambda function can seamlessly communicate with S3 without encountering timeouts caused by network saturation on the NAT instance.

upvoted 3 times

...