ExpertMedium1 markMultiple Choice
AWS SAA-C03 · Question 61 · Domain 4.4: Network Cost Optimization
An application running in a VPC private subnet needs to download large amounts of data from Amazon S3. Currently, the traffic routes through a NAT Gateway. The company's AWS bill shows high data processing charges for the NAT Gateway. How can a solutions architect eliminate these NAT Gateway data processing costs?
An application running in a VPC private subnet needs to download large amounts of data from Amazon S3. Currently, the traffic routes through a NAT Gateway. The company's AWS bill shows high data processing charges for the NAT Gateway. How can a solutions architect eliminate these NAT Gateway data processing costs?
Answer options:
A.
Move the EC2 instances to a public subnet.
B.
Replace the NAT Gateway with a NAT Instance.
C.
Create a VPC Gateway Endpoint for Amazon S3.
D.
Use AWS Direct Connect.
How to approach this question
Identify the cost issue: NAT Gateway data processing fees. Gateway Endpoints for S3/DynamoDB are free and bypass the NAT.
Full Answer
C.Create a VPC Gateway Endpoint for Amazon S3.✓ Correct
Create a VPC Gateway Endpoint for Amazon S3.
VPC Gateway Endpoints for Amazon S3 and DynamoDB are provided at no additional charge. They allow private instances to access S3 without going through a NAT Gateway, eliminating NAT data processing charges.
Common mistakes
Thinking Interface Endpoints (PrivateLink) are free (they charge per hour and per GB). Gateway Endpoints are free.
Practice the full AWS SAA-C03 Practice Exam 7
65 questions · hints · full answers · grading
More questions from this exam
Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team needs...MediumQ02An application runs on Amazon EC2 instances and needs to access an Amazon S3 bucket. What is the ...EasyQ03A company wants to implement federated access to the AWS Management Console for its employees usi...MediumQ04A company is building a mobile application that requires users to sign in using their social medi...EasyQ05A security team wants to enforce MFA for all IAM users before they can terminate EC2 instances. H...Medium