A company stores objects across 50 S3 buckets all in the same AWS Region and wants its EC2 instances to access those buckets over a private connection. The company requires a solution that does not add extra charges. Which design meets these constraints?
Choose an answer
Tap an option to check your answer.
Correct answer: Create a single gateway VPC endpoint that covers all S3 buckets and add that gateway endpoint to the VPC route table..
Why this is the answer
A single gateway VPC endpoint for S3 provides private connectivity to all S3 buckets within the same AWS Region without additional charges for data processing. It's configured in the VPC route table, directing traffic for S3 to the endpoint. Creating a gateway endpoint for each S3 bucket is unnecessary and impractical, as one gateway endpoint covers the entire service. Interface VPC endpoints for S3 incur charges for data processing and require ENIs, making them more expensive than gateway endpoints for S3.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed