AWS Certified Solutions Architect - Associate / Question #1840 of 1019

Question #1840

A company uses ServiceNow. The company needs to migrate existing data and ongoing changes from ServiceNow to Amazon Redshift for analytics. The company requires that data transfer does not occur over the public internet. Which solution meets these requirements with the LEAST development effort?

A

Establish a VPN connection from the VPC to ServiceNow. Use AWS Glue DataBrew to transfer data.

B

Set up an AWS Direct Connect connection between the VPC and ServiceNow. Use AWS Glue DataBrew to transfer data.

C

Create an AWS PrivateLink connection in the VPC to ServiceNow. Use Amazon AppFlow to transfer data.

D

Configure a VPC peering connection to ServiceNow. Use Amazon AppFlow to transfer data.

Explanation

Option C is correct because:
- AWS PrivateLink establishes a private connection between the VPC and ServiceNow without using the public internet, meeting the security requirement.
- Amazon AppFlow is a fully managed integration service that supports ServiceNow as a source. It requires minimal development effort compared to scripting ETL jobs with AWS Glue DataBrew (Options A/B).
- Other options are incorrect:
- A/B: VPN/Direct Connect require complex network setups and may still route traffic externally if ServiceNow isn't integrated with AWS.
- D: VPC peering is not applicable since ServiceNow isn't hosted in a VPC controlled by the company.
Key Points: Use AWS PrivateLink for private SaaS connectivity and Amazon AppFlow for low-code data transfers.

Answer

The correct answer is: C