Which solution will meet these requirements?

A company stores files on 50 Amazon S3 buckets in the same AWS Region The company wants to connect to the S3 buckets securely over a private connection from its Amazon EC2 instances. The company needs a solution that produces no additional cost

Which solution will meet these requirements?
A . Create a gateway VPC endpoint lor each S3 bucket Attach the gateway VPC endpoints to each subnet inside the VPC
B . Create an interface VPC endpoint (or each S3 bucket Attach the interface VPC endpoints to each subnet inside the VPC
C . Create one gateway VPC endpoint for all the S3 buckets Add the gateway VPC endpoint to the VPC route table
D . Create one interface VPC endpoint for all the S3 buckets Add the interface VPC endpoint to the VPC route table

View Answer

Answer: C

Explanation:

To securely connect to Amazon S3 buckets from Amazon EC2 instances over a private connection without incurring additional costs, you can use a gateway VPC endpoint for S3. This method allows you to create a single gateway VPC endpoint for all S3 buckets in the same region, ensuring secure, private communication.

Create a Gateway VPC Endpoint:

Navigate to the VPC console.

In the navigation pane, choose "Endpoints" and then click "Create Endpoint".

Select "AWS services" and then choose "com.amazonaws.<region>.s3" from the service name dropdown.

Select the VPC in which to create the endpoint and the appropriate route tables.

Click "Create endpoint".

Update the Route Tables:

The gateway VPC endpoint will automatically update the selected route tables to include routes that direct S3 traffic through the endpoint.

Ensure that the route tables associated with your subnets include routes for the S3 service pointing to the gateway VPC endpoint.

Verify the Configuration:

Ensure that instances in the VPC can access the S3 buckets using private IP addresses.

Check the routing configuration to confirm that traffic to S3 is routed through the gateway VPC endpoint.

Reference: Gateway VPC Endpoints for Amazon S3

Creating a Gateway Endpoint