SAP-C02 practice question 23 of 35

A company's solutions architect is analyzing costs of a multi-application environment. The environment is deployed across multiple Availability Zones…

Full set: 689 questions

Domain Design Solutions for Organizational Complexity

A company's solutions architect is analyzing costs of a multi-application environment. The environment is deployed across multiple Availability Zones in a single AWS Region. After a recent acquisition, the company manages two organizations in AWS Organizations. The company has created multiple service provider applications as AWS PrivateLink-powered VPC endpoint services in one organization. The company has created multiple service consumer applications in the other organization. Data transfer charges are much higher than the company expected, and the solutions architect needs to reduce the costs. The solutions architect must recommend guidelines for developers to follow when they deploy services. These guidelines must minimize data transfer charges for the whole environment. Which guidelines meet these requirements? (Select TWO.)
Answer options
A: Use AWS Resource Access Manager to share the subnets that host the service provider applications with other accounts in the organization.
B: Place the service provider applications and the service consumer applications in AWS accounts in the same organization.
C: Turn off cross-zone load balancing for the Network Load Balancer in all service provider application deployments. Correct answer
D: Ensure that service consumer compute resources use the Availability Zone-specific endpoint service by using the endpoint's local DNS name. Correct answer
E: Create a Savings Plan that provides adequate coverage for the organization's planned inter- Availability Zone data transfer usage.
Correct Answer:
C. Turn off cross-zone load balancing for the Network Load Balancer in all service provider application deployments.; D. Ensure that service consumer compute resources use the Availability Zone-specific endpoint service by using the endpoint's local DNS name.
Explanation

The primary cause of unexpected data transfer costs in a multi-AZ AWS PrivateLink setup is inter-Availability Zone (AZ) data transfer. This occurs when a service consumer in one AZ connects to a service provider application target in a different AZ. To minimize these costs, traffic must be kept within the same AZ. This is achieved by implementing two corresponding guidelines. First, on the service provider side, disabling cross-zone load balancing on the Network Load Balancer (NLB) ensures that the NLB only routes traffic to targets within the same AZ from which the traffic originated. Second, on the service consumer side, developers must configure their applications to use the AZ-specific DNS hostname for the VPC endpoint. This ensures the connection is established with the endpoint network interface in the same AZ as the consumer application, preventing cross-AZ data flow from the start.

Why Incorrect

A. Sharing subnets with AWS RAM is a feature of VPC Sharing, a different architectural pattern from AWS PrivateLink. It does not address cost optimization for an existing PrivateLink deployment.
B. AWS Organizations is for governance and consolidated billing. Data transfer costs are based on the physical path of data between AZs, not the logical grouping of accounts in an organization.
E. AWS Savings Plans provide discounts on compute usage (EC2, Fargate, Lambda), not on data transfer charges. This option does not apply to the cost category in question.

References

1. AWS PrivateLink Pricing: The official pricing page states, "If your VPC endpoint and service are in different Availability Zones, standard in-region data transfer charges will apply." This confirms the source of the cost. (AWS PrivateLink Pricing, "Data Transfer" section).

2. Network Load Balancer User Guide on Cross-Zone Load Balancing: "By default, cross-zone load balancing is disabled... This preserves the client's source Availability Zone and allows the application to make decisions based on the Availability Zone. This is recommended for applications that require low latency and for reducing inter-Availability Zone data transfer costs." (AWS Documentation, Elastic Load Balancing, Network Load Balancer User Guide, "Load Balancers", "Cross-zone load balancing").

3. VPC User Guide on Interface Endpoint DNS: The documentation details the different DNS hostnames available for an interface endpoint, including the AZ-specific names. "To use zonal affinity, you must use the zonal DNS hostnames to access the endpoint." Using these names directs traffic to a specific AZ. (AWS Documentation, Amazon VPC User Guide, "VPC endpoints", "Access an AWS service using an interface VPC endpoint", "DNS hostnames").

4. AWS Savings Plans Documentation: "Savings Plans is a flexible pricing model that offers low prices on Amazon EC2, AWS Fargate, and AWS Lambda usage..." This confirms that Savings Plans do not cover data transfer costs. (AWS Documentation, Savings Plans User Guide, "What are Savings Plans?").

Scroll to Top