A company wants to optimize AWS data-transfer costs and compute costs across developer accounts within the company's organization in AWS Organizations. Developers can configure VPCs and launch Amazon EC2 instances in a single AWS Region. The EC2 instances retrieve approximately 1 TB of data each day from Amazon S3. The developer activity leads to excessive monthly data-transfer charges and NAT gateway processing charges between EC2 instances and S3 buckets, along with high compute costs. The company wants to proactively enforce approved architectural patterns for any EC2 instance and VPC infrastructure that developers deploy within the AWS accounts. The company does not want this enforcement to negatively affect the speed at which the developers can perform their tasks. Which solution will meet these requirements MOST cost-effectively?
Select one answer.
Marked answer: C
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose C1
I originally wanted to vote for A, as C, as written, does restrict developers to creating VPCs and EC2 instances. However, the question does state that "Developers can configure VPCs and launch Amazon EC2 instances in a single AWS Region." You can read this as that these two activities are the *only* activities developers do, which means that C would *not* unduly limit their daily work.
Chose A2
The question is asking to not limit too much developers' job. Maybe it's just the wording of C, but C says "to allow access only to AWS Service Catalog." Developers can't work by using only AWS Service Catalog.
Chose C2
S3 interface endpoints are not free, but gateway endpoints are free.
