A service running on Amazon EC2 instances in a private subnet reads and writes large amounts of data to an Amazon S3 bucket in the same AWS Region. The instances currently access S3 through a NAT gateway in a public subnet. The company wants to reduce data egress costs. Which solution is the MOST cost-effective?
Choose an answer
Tap an option to check your answer.
Correct answer: Provision a VPC gateway endpoint for Amazon S3. Configure the private subnet route table to use the gateway endpoint for all S3 traffic..
Why this is the answer
A VPC gateway endpoint for Amazon S3 allows instances in a private subnet to access S3 directly within the AWS network without traversing the internet or a NAT gateway. This eliminates data processing charges associated with NAT gateways, making it the most cost-effective solution for large data transfers to S3 within the same region. Provisioning an EC2 NAT instance would incur similar data processing costs to a NAT gateway and add management overhead. Placing a NAT instance in a private subnet would not allow it to route traffic to the internet. Provisioning a second NAT gateway would double the cost without solving the egress cost issue.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed