A company's application hosted on Amazon EC2 instances needs to access an Amazon S3 bucket. Due to data sensitivity, traffic cannot traverse the internet. How should a solutions architect configure access?
A.
Create a private hosted zone using Amazon Route 53.
B.
Configure a VPC gateway endpoint for Amazon S3 in the VPC.
C.
Configure AWS PrivateLink between the EC2 instance and the S3 bucket.
D.
Set up a site-to-site VPN connection between the VPC and the S3 bucket.
You cannot directly use or access PrivateLink. You have to you use VPC endpoint that uses PrivateLink. Damn AWS should not have mentioned about pvt link ever at all...
I think C is the safer answer, privatelink will give a private connection to S3
https://aws.amazon.com/blogs/aws/aws-privatelink-for-amazon-s3-now-available/
It's B.
C also seems correct because a Gateway VPC endpoint is a indeed a part of AWS PrivateLink, as you can see in the path of this url: https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-gateway.html
However, a Gateway VPC endpoint is created in the VPC, it is not attached to an EC2 instance. So it can't be C.
Hello all, Please check this link. It mentions that the scenario mentioned in the question is achieved by both however, to use VPC Gateway we still need a PrivateLink. So answer C seems to be more close.
https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-services-overview.html
Guys, why can this not be C?
Isnt C more proper in that its saying configure the connection whereas B is only saying, build a gateway endpoint, in order to complete this connection you would need to associate this endpoint with a route table entry.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Ekay
Highly Voted 3 years, 8 months agogoooood
Highly Voted 3 years, 7 months agonaveenagurjara
Most Recent 2 years, 11 months agoChiefArch
2 years, 9 months agoreve666
3 years agodone7
3 years, 3 months agoSanjeevPuri
3 years, 3 months agoenvest
3 years, 4 months agoFF11
3 years, 5 months agoNeel1781
3 years, 6 months agoagnd1
3 years, 7 months agotony__
3 years, 7 months agovutana
3 years, 7 months agowoke
3 years, 7 months agonickname20212021
3 years, 7 months agoEricGuo
3 years, 7 months agoRavinder2021
3 years, 7 months agoAsh_c02
3 years, 7 months ago