AWS Certified Solutions Architect - Professional Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  By using a VPC Gateway Endpoint for Amazon S3, traffic between the EC2 instances and S3: Stays within the AWS network, avoiding NAT and internet traffic. Does not incur NAT gateway data processing or data transfer charges. Improves security because S3 access doesn't require internet access. Operational Simplicity: A Gateway Endpoint is easy to configure and requires minimal ongoing maintenance, aligning with the requirement to avoid increasing operational overhead.

• Chose C1

  Option C is the most cost-effective solution that maintains the service’s security posture. An S3 gateway VPC endpoint allows private connections between the VPC and S3 without requiring traffic to go through the internet or NAT gateways. This eliminates the need for NAT gateways when accessing S3, which can significantly reduce costs, especially considering the 1 TB of data retrieved daily from S3. Endpoint policies ensure that the security posture is not compromised by allowing only the required actions on the specific S3 bucket.

• 2

  Any chance someone could fix the typo in the correct answer; "VPC. Attach..." instead of VPAttach; terribly misleading.