A Company Has Several Amazon EC2 Instances Set Up in a Private

question 225

Multiple Choice

A company has several Amazon EC2 instances set up in a private subnet for security reasons. These instances host applications that read and write large amounts of data to and from Amazon S3 regularly. Currently, subnet routing directs all the traffic destined for the internet through a NAT gateway. The company wants to optimize the overall cost without impacting the ability of the application to communicate with Amazon S3 or the outside internet. What should a solutions architect do to optimize costs?

• A) Create an additional NAT gateway. Update the route table to route to the NAT gateway. Update the network ACL to allow S3 traffic.
• B) Create an internet gateway. Update the route table to route traffic to the internet gateway. Update the network ACL to allow S3 traffic.
• C) Create a VPC endpoint for Amazon S3. Attach an endpoint policy to the endpoint. Update the route table to direct traffic to the VPC endpoint.
• D) Create an AWS Lambda function outside of the VPC to handle S3 requests. Attach an IAM policy to the EC2 instances, allowing them to invoke the Lambda function.

---

Definitions:

Applied Intelligence

The use of cognitive abilities to solve real-world problems and adapt to new situations.

Triarchic Theory

A theory of intelligence that proposes three aspects of intelligence: analytical, creative, and practical abilities.

Distributive Justice

Refers to the equitable allocation of assets and resources among members of a society.

Body Image Dissatisfaction

Refers to an individual's negative perception of their own body appearance, often leading to emotional distress and related behavioral issues.