A Company Has Several Amazon EC2 Instances Set Up in a Private

question 225

Multiple Choice

A company has several Amazon EC2 instances set up in a private subnet for security reasons. These instances host applications that read and write large amounts of data to and from Amazon S3 regularly. Currently, subnet routing directs all the traffic destined for the internet through a NAT gateway. The company wants to optimize the overall cost without impacting the ability of the application to communicate with Amazon S3 or the outside internet. What should a solutions architect do to optimize costs?

• A) Create an additional NAT gateway. Update the route table to route to the NAT gateway. Update the network ACL to allow S3 traffic.
• B) Create an internet gateway. Update the route table to route traffic to the internet gateway. Update the network ACL to allow S3 traffic.
• C) Create a VPC endpoint for Amazon S3. Attach an endpoint policy to the endpoint. Update the route table to direct traffic to the VPC endpoint.
• D) Create an AWS Lambda function outside of the VPC to handle S3 requests. Attach an IAM policy to the EC2 instances, allowing them to invoke the Lambda function.

---

Definitions:

Inventory

Assets held for sale in the ordinary course of business, in the process of production for such sale, or in the form of materials or supplies to be consumed in the production process or in rendering services.

Journal Entry

A record in accounting that notes the debit and credit transactions affecting the financial statements of a business.

Significant Influence

A concept in accounting and finance where an investor has the power to participate in, but not control, the financial and operating policy decisions of an investee.

Investment Account

A financial account that holds securities, shares, or other investments made by an individual or entity with the objective of earning returns.