exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 487 discussion

A company runs an application in the AWS Cloud and uses Amazon DynamoDB as the database. The company deploys Amazon EC2 instances to a private network to process data from the database. The company uses two NAT instances to provide connectivity to DynamoDB.
The company wants to retire the NAT instances. A solutions architect must implement a solution that provides connectivity to DynamoDB and that does not require ongoing management.
What is the MOST cost-effective solution that meets these requirements?

  • A. Create a gateway VPC endpoint to provide connectivity to DynamoDB.
  • B. Configure a managed NAT gateway to provide connectivity to DynamoDB.
  • C. Establish an AWS Direct Connect connection between the private network and DynamoDB.
  • D. Deploy an AWS PrivateLink endpoint service between the private network and DynamoDB.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Alfio
Highly Voted 3 years, 8 months ago
agree with "A". Gateway endpoint for S3 and Dynamo is perfect
upvoted 27 times
...
GeniusMikeLiu
Highly Voted 3 years, 8 months ago
I agree with A. It is the most cheapest one.
upvoted 9 times
...
TecoCloud
Most Recent 2 years, 10 months ago
A and B should be the answers Gateway Endpoint - Most Cost Effective NAT Gateway - Self Managed
upvoted 1 times
...
slcheng
2 years, 10 months ago
Selected Answer: A
Vote A. zero cost.
upvoted 1 times
...
naveenagurjara
2 years, 11 months ago
Selected Answer: A
DynamoDB is ALWAYS Internet Facing. You don't need explicit NAT to connect to Dyanmo DB form the Internet. the use case here talks about the internal EC2 accessing DynamoDB and avoiding Internet.
upvoted 2 times
...
etheng1970
2 years, 11 months ago
Selected Answer: A
A ....
upvoted 1 times
...
igor_nov1
2 years, 12 months ago
Selected Answer: B
IMHO The main idea is that it's necessary to establish connection from organisational resources outside of AWS with DynamoBD inside AWS. It's not possible to do it just by adding one VPC endpoint inside AWS (this will allow you to have connection from resources incide AWS but not from outside). This why NAT gateway (managed solution) is a good variant for replacement. C and D just overhead in this case and waste of money.
upvoted 2 times
...
KP90
3 years, 1 month ago
Selected Answer: A
Gateway endpoint is a target that is used within the route tables to allow you to reach supported services, currently the only supported services using a Gateway Endpoint are Amazon S3 and DynamoDB
upvoted 3 times
...
salma996
3 years, 1 month ago
Selected Answer: A
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-dynamodb.html
upvoted 1 times
...
sayed
3 years, 4 months ago
Selected Answer: A
A S3&Dynamodb use VPC Endpoint Gateway it is the correct one and cheaper than VPC Endpoint interface
upvoted 2 times
...
tc15
3 years, 4 months ago
Correct Answer: A See peterHawk below and... Reduce Cost and Increase Security with Amazon VPC Endpoints: "There are two types of VPC endpoints: interface endpoints and gateway endpoints. Amazon Simple Storage Service (S3) and Amazon DynamoDB are accessed using gateway endpoints." https://aws.amazon.com/blogs/architecture/reduce-cost-and-increase-security-with-amazon-vpc-endpoints
upvoted 1 times
...
Robert_B
3 years, 4 months ago
Selected Answer: A
Though answer, as many solutions server the purpose BUT "A" is correct as it is cheapest, B is fit but involves more costs -> see details here: "https://aws.amazon.com/blogs/architecture/reduce-cost-and-increase-security-with-amazon-vpc-endpoints/"
upvoted 1 times
ashdon
3 years, 3 months ago
for DynamoDB there is no interface endpoint it is a gateway endpoint so A is not correct
upvoted 1 times
...
Robert_B
3 years, 4 months ago
*tough
upvoted 1 times
...
...
muxopancy
3 years, 5 months ago
A is correct
upvoted 1 times
...
keeplearning_rahul
3 years, 5 months ago
Selected Answer: A
A is the cheapest
upvoted 1 times
...
prex
3 years, 5 months ago
Selected Answer: A
i vote answer A
upvoted 1 times
...
muhsin
3 years, 5 months ago
the answer is D. Because PrivateLink provides a connection between EC2s in the private subnet and AWS Service. check out the drawing in the link https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-services-overview.html VPC endpoint is going through router and to the EC2s in the public subnet. https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-dynamodb.html
upvoted 3 times
...
aravinds4
3 years, 6 months ago
Selected Answer: D
AWS PrivateLink endpoint enables connection between private VPC and AWS managed services without going over the internet
upvoted 2 times
chael88
2 years, 11 months ago
PrivateLink connects VPCs to VPCs. In this example, the instances and database are already in the same vpc
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...