Question 990
A cost review weighs NAT instances, NAT gateways, and private endpoints. The team confirms that two private AZs send all internet traffic through a NAT gateway located in only one AZ. Which AWS architecture decision should be prioritized?
Explanation
Correct Answer
The scenario identifies this requirement: Two private AZs send all internet traffic through a NAT gateway located in only one AZ. Select Add appropriate AZ-local gateways and route tables if reliability and transfer cost warrant as the specified technical mechanism. Local gateways reduce cross-zone egress paths. This response addresses the problem described rather than a different design goal.
Incorrect Answers
The option Deploy S3 gateway endpoints instead of NAT for S3 calls addresses a separate condition: private subnets use a NAT gateway solely to access S3. Gateway endpoints eliminate S3-specific NAT data fees. The actual requirement is two private AZs send all internet traffic through a NAT gateway located in only one AZ. Recommended corrective action: Add appropriate AZ-local gateways and route tables if reliability and transfer cost warrant. Local gateways reduce cross-zone egress paths.
Evaluate NAT instance or gateway-free endpoint architecture after assessing risk would help if a tiny development VPC has high NAT gateway fixed-hour costs. Low-volume cost tradeoffs include operations and availability. That is not the symptom described here: two private AZs send all internet traffic through a NAT gateway located in only one AZ. The matching response is Add appropriate AZ-local gateways and route tables if reliability and transfer cost warrant, because local gateways reduce cross-zone egress paths.
Evaluate interface endpoint hourly/data charges against NAT usage solves a different operational problem where a service requires private access to an AWS API with no gateway endpoint type. PrivateLink cost tradeoffs vary with volume and AZ count. It does not directly address two private AZs send all internet traffic through a NAT gateway located in only one AZ. The case calls for Add appropriate AZ-local gateways and route tables if reliability and transfer cost warrant, since local gateways reduce cross-zone egress paths.