ANS-C01 · Question #76
An organization is using a VPC endpoint for Amazon S3. When the security group rules for a set of instances were initially configured, access was restricted to allow traffic only to the IP addresses…
The correct answer is C. Update the application server's outbound security group to use the prefix-list for Amazon S3 in the. https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-prefix-lists.html A prefix list ID is required for creating an outbound security group rule that allows traffic from a VPC to access an AWS service through a gateway VPC endpoint. Currently, the services that support…
Question
An organization is using a VPC endpoint for Amazon S3. When the security group rules for a set of instances were initially configured, access was restricted to allow traffic only to the IP addresses of the Amazon S3 API endpoints in the region from the published JSON file. The application was working properly, but now is logging a growing number of timeouts when connecting with Amazon S3. No internet gateway is configured for the VPC. Which solution will fix the connectivity failures with the LEAST amount of effort?
Options
- ACreate a Lambda function to update the security group based on AmazonIPSpaceChanged
- BUpdate the VPC routing to direct Amazon S3 prefix-list traffic to the VPC endpoint using the route
- CUpdate the application server's outbound security group to use the prefix-list for Amazon S3 in the
- DCreate an additional VPC endpoint for Amazon S3 in the same route table to scale the concurrent
How the community answered
(56 responses)- A23% (13)
- B7% (4)
- C59% (33)
- D11% (6)
Explanation
https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-prefix-lists.html A prefix list ID is required for creating an outbound security group rule that allows traffic from a VPC to access an AWS service through a gateway VPC endpoint. Currently, the services that support this action are Amazon S3 and Amazon DynamoDB.
Topics
Community Discussion
No community discussion yet for this question.