You are working on a loosely-coupled web application using EC2 instance & Amazon SQS. For further analysis, the Server in your on-prem locations needs to have connectivity with Amazon SQS. Post POC, this will be a long-term project requirement. Large bandwidth will be required from on-prem servers to AWS VPC. Which of the following connectivity option will be best suited to meet this requirement with secure traffic flow?

Answer options:

A.Create a gateway endpoint in your VPC private subnet. Use AWS Direct Connect link to establish connectivity from on-prem servers toAmazon SQS.
B.Create a gateway endpoint in your VPC private subnet. Use AWS Managed VPN connection to establish connectivity from on-prem servers toAmazon SQS.
C.Create an interface endpoint from your VPC private subnet. Use AWS Managed VPN connection to establish connectivity from on-prem servers toAmazon SQS.
D.Create an interface endpoint from your VPC private subnet. Use AWS Direct Connect link to establish connectivity from on-prem servers toAmazon SQS.

Correct Answer: D
Interface Endpoints can be used to connect from subnets in VPC to various AWS services like Amazon SQS directly without Internet. With Interface Endpoint, all this traffic flows with the AWS network. Also, with interface endpoints, servers from on-premises locations will connect to AWS resources only when the On-Prem location connects via AWS Direct Connect links.
Option A & B are incorrect as the VPC Gateway endpoint does not support connectivity to Amazon SQS.
Option C is incorrect as the VPC interface endpoint does not support connectivity via AWS Managed VPN connections.
For more information on Interface endpoints, refer to the following URL-
https://docs.aws.amazon.com/vpc/latest/userguide/vpce-interface.html