A company has decided to move some workloads onto AWS to create a grid environment to run market analytics. The grid will consist of many similar instances, spun-up by a job-scheduling function. Each time a large analytics workload is completed, a new VPC is deployed along with job scheduler and grid nodes. Multiple grids could be running in parallel. Key requirements are: Grid instances must communicate with Amazon S3 to retrieve data to be processed. Grid instances must communicate with Amazon DynamoDB to track intermediate data. The job scheduler needs only to communicate with the Amazon EC2 API to start new grid nodes. A key requirement is that the environment has no access to the internet, either directly or via the on-premises proxy. However, the application needs to be able to seamlessly communicate to Amazon S3, Amazon DynamoDB, and Amazon EC2 API, without the need for reconfiguration for each new deployment. Which of the following should the Solutions Architect do to achieve this target architecture? (Choose three.)

Question

Quizplus · Accepted Answer

VPC endpoints allow instances in a VPC to communicate with supported AWS services without requiring an internet gateway, NAT device, or VPN connection. By enabling VPC endpoints for Amazon S3 and DynamoDB, the grid instances can communicate with these services without having access to the internet. Configuring the application on the grid instances to use the private DNS name of the Amazon S3 endpoint ensures that the application can seamlessly communicate with Amazon S3 without the need for reconfiguration for each new deployment. Enabling an interface VPC endpoint for EC2 allows the job scheduler to communicate with the Amazon EC2 API without having access to the internet.

A Company Has Decided to Move Some Workloads onto AWS