Exam AWS Certified Data Engineer - Associate DEA-C01 topic 1 question 122 discussion

Exam question from Amazon's AWS Certified Data Engineer - Associate DEA-C01

Question #: 122
Topic #: 1

[All AWS Certified Data Engineer - Associate DEA-C01 Questions]

A company uses an AWS Lambda function to transfer files from a legacy SFTP environment to Amazon S3 buckets. The Lambda function is VPC enabled to ensure that all communications between the Lambda function and other AVS services that are in the same VPC environment will occur over a secure network.

The Lambda function is able to connect to the SFTP environment successfully. However, when the Lambda function attempts to upload files to the S3 buckets, the Lambda function returns timeout errors. A data engineer must resolve the timeout issues in a secure way.

Which solution will meet these requirements in the MOST cost-effective way?

A. Create a NAT gateway in the public subnet of the VPC. Route network traffic to the NAT gateway.
B. Create a VPC gateway endpoint for Amazon S3. Route network traffic to the VPC gateway endpoint.
C. Create a VPC interface endpoint for Amazon S3. Route network traffic to the VPC interface endpoint.
D. Use a VPC internet gateway to connect to the internet. Route network traffic to the VPC internet gateway.

Show Suggested Answer

Suggested Answer: B 🗳️

by phkhadse at Aug. 7, 2024, 1:45 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

ArunRav

Highly Voted 1 year ago

Selected Answer: B

Option B - VPC Gateway Endpoint for Amazon S3

upvoted 6 times

...

phkhadse

Highly Voted 1 year ago

Option B - VPC Gateway Endpoint for Amazon S3 While interface endpoints is a viable solution, it can be more complex and expensive compared to a gateway endpoint. VPC interface endpoints charge per hour and per gigabyte of data transferred.

upvoted 5 times

...

praveenu

Most Recent 3 months ago

Selected Answer: B

You can access Amazon S3 from your VPC using gateway VPC endpoints. After you create the gateway endpoint, you can add it as a target in your route table for traffic destined from your VPC to Amazon S3. There is no additional charge for using gateway endpoints. https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html

upvoted 1 times

...

Ashishk1

12 months ago

Selected Answer: C

The solution that will meet the requirements of resolving the timeout issues when uploading files from the Lambda function to Amazon S3 buckets in a secure and cost-effective way is C. Create a VPC interface endpoint for Amazon S3. Route network traffic to the VPC interface endpoint .

upvoted 1 times

...