You are implementing AWS Direct Connect.
You intend to use AWS public service endpoints, such as Amazon S3, across the AWS Direct
Connect link. You want other Internet traffic to use your existing link to an Internet Service
Provider.
What is the correct way to configure AWS Direct Connect for access to services such as Amazon
S3?
A.
Create a public interface on your AWS Direct Connect link.
Redistribute BGP routes into your existing routing infrastructure; advertise specific routes for your
network to AWS.
B.
Create a private interface on your AWS Direct Connect link.
Redistribute BGP routes into your existing routing infrastructure and advertise a default route to
AWS.
C.
Create a private interface on your AWS Direct Connect link.
Configure a static route via your AWS Direct Connect link that points to Amazon S3.
Configure specific routes to your network in your VPC.
D.
Configure a public interface on your AWS Direct Connect link.
Configure a static route via your AWS Direct Connect link that points to Amazon S3.
Advertise a default route to AWS using BGP.
Explanation:
https://aws.amazon.com/directconnect/faqs/
private interface is for connecting to VPC whereas public interface is for services like s3/glacier that is not in VPC.
http://docs.aws.amazon.com/directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.html