Cloud · Flashcard
Private-subnet instances must reach S3 without traversing the internet, at the lowest cost. Which endpoint type?
- AA gateway endpoint, which adds a route table entry and carries no hourly charge
- BAn interface endpoint, which places an elastic network interface in each subnet
- CEither one, since S3 and DynamoDB support both at identical pricing
- DA NAT gateway with an S3 prefix list, which keeps the traffic on the backbone
Why this is the answer
Gateway endpoints exist only for S3 and DynamoDB, work by adding a prefix-list route to the route table, and carry no hourly or per-GB endpoint charge — which makes them the cheap default for those two services. Interface endpoints put an ENI in the subnet and bill per hour and per GB, so they are what you use for the many services that have no gateway option. A NAT gateway would send the traffic out and charge for it.
Official docsMore AWS Solutions Architect Associate (SAA-C03) flashcards
- Reporting queries are saturating an RDS primary in a Multi-AZ instance deployment. What actually helps?
- Instances pull terabytes per month from S3 through a NAT gateway. What removes most of that charge?
- A three-tier web application runs in one Availability Zone. The business needs it to survive the loss of a zone, the reporting queries are saturating the database, and the budget will not stretch to a second Region. What is the smallest set of changes that meets all three?