Cloud · Flashcard
Private-subnet instances must reach S3 without traversing the internet, at the lowest cost. Which endpoint type?
Why this is the answer
Gateway endpoints exist only for S3 and DynamoDB, work by adding a prefix-list route to the route table, and carry no hourly or per-GB endpoint charge — which makes them the cheap default for those two services. Interface endpoints put an ENI in the subnet and bill per hour and per GB, so they are what you use for the many services that have no gateway option. A NAT gateway would send the traffic out and charge for it.
Read more in the docsMore AWS Solutions Architect Associate (SAA-C03) flashcards
- Reporting queries are saturating an RDS primary in a Multi-AZ instance deployment. What actually helps?
- Instances pull terabytes per month from S3 through a NAT gateway. What removes most of that charge?
- A three-tier web application runs in one Availability Zone. The business needs it to survive the loss of a zone, the reporting queries are saturating the database, and the budget will not stretch to a second Region. What is the smallest set of changes that meets all three?