ANS-C01 · Question #6
A software-as-a-service (SaaS) provider hosts its solution on Amazon EC2 instances within a VPC in the AWS Cloud. All of the provider's customers also have their environments in the AWS Cloud. A…
The correct answer is A. Deploy the SaaS service endpoint behind a Network Load Balancer. B. Configure an endpoint service, and grant the customers permission to create a connection to the. As the service provider, you create a Network Load Balancer in your VPC as the service front end. You then select this load balancer when you create the VPC endpoint service configuration. You grant permission to specific AWS principals so that they can connect to your service…
Question
A software-as-a-service (SaaS) provider hosts its solution on Amazon EC2 instances within a VPC in the AWS Cloud. All of the provider's customers also have their environments in the AWS Cloud. A recent design meeting revealed that the customers have IP address overlap with the provider's AWS deployment. The customers have stated that they will not share their internal IP addresses and that they do not want to connect to the provider's SaaS service over the internet. Which combination of steps is part of a solution that meets these requirements? (Choose two.)
Options
- ADeploy the SaaS service endpoint behind a Network Load Balancer.
- BConfigure an endpoint service, and grant the customers permission to create a connection to the
- CDeploy the SaaS service endpoint behind an Application Load Balancer.
- DConfigure a VPC peering connection to the customer VPCs. Route traffic through NAT gateways.
- EDeploy an AWS Transit Gateway, and connect the SaaS VPC to it. Share the transit gateway with
How the community answered
(58 responses)- A69% (40)
- C17% (10)
- D5% (3)
- E9% (5)
Explanation
As the service provider, you create a Network Load Balancer in your VPC as the service front end. You then select this load balancer when you create the VPC endpoint service configuration. You grant permission to specific AWS principals so that they can connect to your service. As a service consumer, the customer creates an interface VPC endpoint, which establishes connections between the subnets that they select from their VPC and your endpoint service. https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-share-your-services.html
Topics
Community Discussion
No community discussion yet for this question.