AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 217

Your company is expanding its cloud infrastructure and moving many of its flat files and static assets to S3. You currently use a VPN to access your compute infrastructure, but you require more reliability for your static files as you are offloading all of your important data to AWS. What is your best course of action while keeping costs low?

Answer options

• A. Create a Direct Connect connection using a Private VIF to access both compute and S3 resources.
• B. Create an S3 endpoint and create a route to the endpoint prefix list for your VPN to allow access to your S3 resources.
• C. Create two Direct Connect connections. Each connected to a Private VIF to ensure maximum resiliency.
• D. Create a Direct Connect connection using a Public VIF and route your VPN over the DX connection to your VPN endpoint.

Correct answer: D

Explanation

The correct answer is D because using a Public VIF with Direct Connect allows for a more reliable connection to S3 while still routing VPN traffic efficiently. Option A is less cost-effective as it involves a Private VIF, which doesn't provide direct access to S3. Option B, while it allows access to S3, may not guarantee the reliability required for critical data. Option C is overly complex and expensive for the situation described.