A company needs to migrate an on-premises SFTP site to AWS. The SFTP site currently runs on a Linux VM. Uploaded files are made available to downstream applications through an NFS share. As part of the migration to AWS, a solutions architect must implement high availability. The solution must provide external vendors with a set of static public IP addresses that the vendors can allow. The company has set up an AWS Direct Connect connection between its on-premises data center and its VPC. Which solution will meet these requirements with the LEAST operational overhead?
Select one answer.
Marked answer: A
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose A1
A is the correct answer here. B is wrong because public endpoint for Transfer Family doesn't provide static IP addresses for vendor allowlisting.
Chose B1
Public endpoint configuration is on Transfer Family server and not on VPC. So Answer is B and A. A VPC Endpoint is a service that allows resources within your VPC to connect to other AWS services privately.
Chose B2
A is wrong. The use of an internet-facing VPC endpoint for AWS Transfer Family is not necessary here. The publicly accessible endpoint provided by AWS Transfer Family itself meets the requirement for external access. Also, assigning Elastic IPs to subnets is unnecessary because AWS Transfer Family manages public IPs.
