SAA-C03 Question 540
Single answerA company is running its workloads in a private subnet within a VPC and needs to allow instances in the private subnet to access the internet to download software updates. The company wants a solution that is cost-effective for low traffic volumes but scalable for future growth. Which solution should the company choose?
- A
Deploy a NAT instance and manually scale it as needed.
- B
Deploy a NAT gateway for automatic scaling and high availability.
- C
Route traffic through an internet gateway attached to the private subnet.
- D
Deploy a bastion host in the private subnet to proxy the internet requests.
Show answer and explanation
Correct answer: B
Explanation
A NAT gateway is the best solution for this scenario because it provides a fully managed, scalable, and highly available way for private subnet instances to access the internet. While a NAT instance can be used, it requires manual management and scaling, which makes it less suitable for handling potential future growth. The other options, such as using an internet gateway or bastion host, do not meet the company's requirements.
- A. Incorrect.
This option involves using a NAT instance, which is more cost-effective at low traffic volumes but lacks scalability and requires manual management for scaling and high availability.
- B. Correct.
This option involves using a NAT gateway, which is fully managed, automatically scales to handle traffic, and is highly available, making it the best solution for scalability and future growth.
- C. Incorrect.
An internet gateway cannot be attached directly to a private subnet. This option would only work with a public subnet, and it does not achieve the company's goal of maintaining a private subnet.
- D. Incorrect.
A bastion host is used for administrative purposes, such as SSH access to private instances, and is not designed to proxy internet requests for private subnet instances.