Dynamodb medium
What is the primary security and cost advantage of using a 'VPC Gateway Endpoint' for DynamoDB traffic?
- A It encrypts the data using a custom KMS key that is not available over the public internet.
- B Boundary Protection: Traffic stays within the AWS private network backbone, bypassing public NAT Gateways. This reduces data transfer costs and eliminates the risk of public internet exposure.
- C It allows DynamoDB to be accessed via the legacy telnet protocol.
- D It doubles the provisioned throughput of the table for no extra charge.
Answer: B. Boundary Protection: Traffic stays within the AWS private network backbone, bypassing public NAT Gateways. This reduces data transfer costs and eliminates the risk of public internet exposure.
Without a VPC endpoint, traffic from your private EC2 instances must go through a NAT Gateway to reach the public DynamoDB API. NAT Gateways are expensive (per GB processed). A Gateway Endpoint is a free routing entry that keeps traffic 'local' within AWS, improving both latency and security.
One system design question a day, with spaced repetition so the ones you miss come back.
Get the appRelated questions
- DynamoDB has a strict 400KB limit on the size of a single item. What is the recommended design pattern if you need to store larger documents (e.g., 5MB PDFs)?
- What is the primary role of the 'Partition Key' in ensuring DynamoDB's infinite horizontal scalability?
- Why is the `Query` operation generally preferred over `Scan` for production workloads in DynamoDB?
- DynamoDB is a 'fully managed' serverless database. What is a primary operational benefit of this model for an engineering team?
- In 'Provisioned Capacity' mode, how is the performance budget of a DynamoDB table defined?
- When would an architect choose to implement DAX (DynamoDB Accelerator) in front of an existing DynamoDB table?