A company is using a NAT gateway to allow internet connectivity for private subnets in a VPC in the us-west-2 Region. After a security audit, the company needs to remove the NAT gateway. In the…

Question

Options

• AValidate that private DNS is enabled on the VPC by setting the enableDnsHostnames VPC
• BCreate a new security group with an entry to allow outbound traffic that uses the TCP protocol on
• CCreate a new security group with entries to allow inbound traffic that uses the TCP protocol on
• DCreate the following interface VPC endpoints in the VPC: com.amazonaws.us-west-2.logs and
• ECreate the following interface VPC endpoint in the VPC: com.amazonaws.us-west-2.cloudwatch.
• FAssociate the VPC endpoint or endpoints with route tables that the private subnets use.

• A
  67% (41)
• B
  5% (3)
• E
  20% (12)
• F
  8% (5)

Explanation

An interface VPC endpoint provides reliable, scalable connectivity to CloudWatch without requiring a NAT gateway. https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-and-interface- https://docs.aws.amazon.com/vpc/latest/privatelink/aws-services-privatelink-support.html To use private DNS, you must enable DNS hostnames and DNS resolution for your VPC. The security group for the interface endpoint must allow communication between the endpoint network interface and the resources in your VPC that must communicate with the service. https://docs.aws.amazon.com/vpc/latest/privatelink/create-interface-endpoint.html

No community discussion yet for this question.