AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

A company runs web servers in private subnets across two Availability Zones in a single VPC. Each subnet has a NAT gateway in the same Availability Zone. The instances download hundreds of terabytes of data every month from Amazon S3 within the same AWS Region, and the NAT gateway data-processing charges dominate the network bill. The company wants to minimize ongoing network costs without sacrificing high availability or throughput. Which action will achieve this goal at the lowest cost?

Delete one NAT gateway and configure the remaining NAT gateway to serve both subnets, accepting cross-AZ traffic.
Provision an AWS Direct Connect public virtual interface to the Region and route S3 traffic over the connection.
Create a VPC gateway endpoint for Amazon S3 in the VPC and update each private subnet's route table to direct S3 traffic to the endpoint.
Replace both NAT gateways with burstable t3.micro NAT instances configured in an Auto Scaling group.

Report Issue

Answer Description

A VPC gateway endpoint lets resources in private subnets communicate with Amazon S3 without traversing a NAT device or an internet gateway. Gateway endpoints are implemented redundantly within every Availability Zone and have no hourly or per-GB data-processing fees; you pay only standard S3 request and storage-class data-transfer rates. Updating the route tables to use the endpoint removes all NAT data-processing costs. Deleting one NAT gateway would introduce cross-AZ data-transfer charges for the other Availability Zone, which often exceeds the hourly cost of keeping two NAT gateways. NAT instances still incur EC2 charges and retain inter-AZ data-transfer costs. A Direct Connect public virtual interface requires a dedicated port and does not eliminate regional VPC-to-S3 charges. Therefore, creating the S3 gateway endpoint is the most cost-effective solution.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.