Q97 — AWS SAA-C03 Ch.14

Question 97 of 100 | ← Chapter 14

Q1097. A company wants to run a serverless application in a VPC for a short-term project. The application uses AWS Lambda functions. The application needs to interact with an on-premises database. The company wants to establish secure and cost-effective network connectivity between the Lambda functions and the on-premises database.Which solution will meet these requirements?

• A. Create an AWS Site-to-Site VPN connection between the on-premises network and the VPC. ✓
• B. Use AWS Direct Connect to establish a dedicated network connection between the on-premises network and the VPC.
• C. Use a Gateway Load Balancer to establish a private connection between the Lambda functions and the on-premises network.
• D. Use AWS Transit Gateway to establish a hub-and-spoke network architecture that connects the on- premises network and the VPC.

Correct Answer: A. Create an AWS Site-to-Site VPN connection between the on-premises network and the VPC.

Explanation

To address the requirements of securely and cost-effectively connecting AWS Lambda functions in a VPC to an on-premises database, we need to consider the nature of the connectivity options provided by AWS.Let's evaluate each option:A. Create an AWS Site-to-Site VPN connection between the on-premises network and the VPC:This option allows you to create a secure, encrypted connection over the Internet between your VPC and your corporate data center or office.It is a cost-effective solution, especially for short-term projects, as there are no fixed costs associated with dedicated circuits.It supports IPsec VPN tunnels, which provide strong security. B. Use AWS Direct Connect to establish a dedicated network connection between the on-premises network and the VPC:Direct Connect provides a dedicated, private connection from your office or data center to AWS. While it offers lower latency and higher bandwidth, it typically involves higher setup and ongoing costs, which may not be ideal for short-term projects.C. Use a Gateway Load Balancer to establish a private connection between the Lambda functions and the on-premises network:Gateway Load Balancer is used for traffic distribution across multiple targets, such as EC2 instances or IP addresses within a VPC.It does not directly establish a connection between Lambda functions and on-premises networks. Lambda functions require a VPC for private access, and Gateway Load Balancer operates within the VPC boundary. D. Use AWS Transit Gateway to establish a hub-and-spoke network architecture that connects the on- premises network and the VPC:Transit Gateway is a service that enables you to connect your VPCs and on-premises networks through a single, centralized service.It is useful for more complex network architectures but involves higher complexity and potentially higher costs, making it less suitable for short-term projects.Given the requirements for a secure and cost-effective solution for a short-term project, Option A (Create an AWS Site-to-Site VPN connection between the on-premises network and the VPC) is the most suitable choice. It provides a secure, encrypted connection over the Internet, which is cost-effective and suitable for temporary or short-term projects.