Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 875 discussion

About option C - S3 Interface Endpoint 1. Creates a private network interface (ENI) in your VPC that connects to Amazon S3. 2. Provides granular IAM-based controls at the operation level. 3. Typically much more expensive due to the cost associated with the network interface and data processing charges. About option D - S3 Gateway Endpoint: 1. Creates a route entry in the VPC route table for accessing S3 without crossing the public internet. 2. Simpler and more cost-effective for high-volume S3 access, as there are no additional data processing charges or interface costs. 3. Doesn't support granular IAM controls per operation, but bucket policies can be used for access control so that's good.

Why I opt for Option C? #Private Access: It allows direct access to S3 buckets from a private subnet without data traversing the public internet, meeting the regulatory requirement. #Cost-Effective: Compared to other options, utilizing an S3 interface endpoint is generally the most cost-efficient way to achieve private access to S3. #Summary: When data needs to stay within a private network, use an S3 interface endpoint to access S3 buckets. Always consider the specific regulatory requirements and cost implications when choosing a solution.

no internet and need access to s3 => s3 gateway endpoint

Gateway endpoint free, so definitely interface end point expensive than it

AnswerD https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html taking into consideration that in both cases (s3 Instance Endpoint and S3Gateway endpoint), network traffic remains on the AWS network we need to think about other data which we have. For example application is in AWS cloud hence there is no need for access from on-premises. in that situation S3 Gateway endpoint seems to be better (and it is for free) https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html#types-of-vpc-endpoints-for-s3

D for sure.

Gateway endpoints are free.

Sorry, I think D is the correct option. Gateway endpoint is cheaper than Interface endpoint

Gateway endpoint for S3

should be C