Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 860 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 860
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A solutions architect is creating an application. The application will run on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC. The EC2 instances will frequently access large files that contain confidential information. These files are stored in Amazon S3 buckets for processing. The solutions architect must optimize the network architecture to minimize data transfer costs.

What should the solutions architect do to meet these requirements?

A. Create a gateway endpoint for Amazon S3 in the VPC. In the route tables for the private subnets, add an entry for the gateway endpoint.
B. Create a single NAT gateway in a public subnet. In the route tables for the private subnets, add a default route that points to the NAT gateway.
C. Create an AWS PrivateLink interface endpoint for Amazon S3 in the VPIn the route tables for the private subnets, add an entry for the interface endpoint.
D. Create one NAT gateway for each Availability Zone in public subnets. In each of the route tables for the private subnets, add a default route that points to the NAT gateway in the same Availability Zone.

Show Suggested Answer

Suggested Answer: A 🗳️

by AlvinC2024 at April 3, 2024, 6:07 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Scheldon

8 months, 2 weeks ago

Selected Answer: A

AnswerA I think only option A have any sense. It is cheap (no cost), it is secure (traffic is not going to public network). https://docs.aws.amazon.com/vpc/latest/privatelink/gateway-endpoints.html

upvoted 3 times

...