Amazon Exam ANS-C01 Topic 3 Question 50 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 50
Topic #: 3

A company has workloads that run in a VPC. The workloads access Amazon S3 by using an S3 gateway endpoint. The company also has on-premises workloads that need to access Amazon

S3 privately over a VPN connection. The company has established the VPN connection to the VPC.

Which solution will provide connectivity to Amazon S3 from the VPC workloads and the on-premises workloads in the MOST operationally efficient way?

ADeploy a proxy fleet of Amazon EC2 instances in the VPC behind an Application Load Balancer (ALB). Configure the on-premises workloads to use the ALB as the proxy server to connect to Amazon S3. Configure the proxy fleet to use the S3 gateway endpoint to connect to Amazon S3.

BDelete the S3 gateway endpoint. Create an S3 interface endpoint. Deploy a proxy fleet of Amazon EC2 instances in the VPC behind an Application Load Balancer (ALB).
Configure the on-premises workloads to use the ALB as the proxy server to connect to Amazon S3. Configure the proxy fleet and the VPC workloads to use the S3 interface
endpoint to connect to Amazon S3.

CCreate an S3 interface endpoint. Configure an on-premises DNS resolver to resolve the S3 DNS names to the private IP addresses of the S3 interface endpoint. Use the S3
interface endpoint to access Amazon S3. Continue to use the S3 gateway endpoint for the VPC workloads to access Amazon S3.

DSet up an AWS Direct Connect connection. Create a public VIF. Configure on-premises routing to route the S3 traffic over the public VIF. Make no changes to the on-premises
workloads. Continue to use the S3 gateway endpoint for the VPC workloads to access Amazon S3.

Show Suggested Answer

Suggested Answer: C

The correct solution is to use an S3 interface endpoint and an on-premises DNS resolver. An S3 interface endpoint allows you to access Amazon S3 using private IP addresses within your VPC. An on-premises DNS resolver can be configured to forward the DNS queries for the S3 domain names to the S3 interface endpoint, so that the on-premises workloads can access Amazon S3 privately over the VPN connection. This solution is operationally efficient, as it does not require any additional infrastructure or changes to the existing workloads. The VPC workloads can continue to use the S3 gateway endpoint, which provides lower latency and higher throughput than the S3 interface endpoint.

by Nobuko at Apr 30, 2025, 02:07 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lucia

8 days ago

I think option C could be a good alternative, using the S3 interface endpoint.

upvoted 0 times

...

1 months ago

Ah, the classic proxy server approach. Option A could work, but I feel like the overhead of the proxy fleet might be overkill here. Option C is more streamlined in my opinion.

upvoted 0 times

Kati

4 days ago

Option C does seem like a cleaner approach to handle the connectivity.

upvoted 0 times

...

Suzi

9 days ago

Yeah, I think Option C is a simpler and more efficient solution.

upvoted 0 times

...

Dong

14 days ago

I agree, Option A seems like it might be a bit too much to manage.

upvoted 0 times

...

1 months ago

The proxy fleet solution in option B seems like the most operationally efficient way to handle both the VPC and on-premises workloads. The S3 interface endpoint allows for better control and security.

upvoted 0 times

Stephane

11 days ago

User 2

upvoted 0 times

...

Renato

1 months ago

User 1

upvoted 0 times

...

Santos

1 months ago

I think option A is the best solution.

upvoted 0 times

...