Private-subnet fleet reaching S3 without the internet
Medium
Secure Architectures
Task 1.2: Design secure workloads and applications
QuestionWatch the method
Predict first. Then watch short phrases—not full sentences—drive the decision.
Scenario
Corvid Analytics runs a 40-instance Spark fleet in the private subnets of a VPC in us-east-2, reading and writing multi-gigabyte Parquet objects in two S3 buckets all day.
The VPC has no internet gateway today, and the platform security standard forbids adding one, a NAT device, or any other route to the public internet from those subnets.
Finance has already flagged the data-transfer line, so the team wants no new hourly charges, and the thin on-call rota rules out another instance to patch.
Question
How should the fleet reach Amazon S3 from those private subnets with the least added charge?
Model → Coach → Solo·Model · step 1 of 5 · not started
Activity timeline · 1 events
- 01coach · Make a prediction, record your confidence, then watch the reasoning method.