DEA-C01 · Question #234
A company has a data pipeline that uses an Amazon RDS instance, AWS Glue jobs, and an Amazon S3 bucket. The RDS instance and AWS Glue jobs run in a private subnet of a VPC and in the same security…
The correct answer is A. Add an inbound rule that allows all TCP traffic on all TCP ports. Set the security group as the. Since both the RDS instance and the Glue jobs share the same security group, allowing that security group as the source for inbound TCP traffic (on all ports) immediately restores connectivity from the Glue-attached ENIs to the database. This single rule change requires no…
Question
A company has a data pipeline that uses an Amazon RDS instance, AWS Glue jobs, and an Amazon S3 bucket. The RDS instance and AWS Glue jobs run in a private subnet of a VPC and in the same security group. A user made a change to the security group that prevents the AWS Glue jobs from connecting to the RDS instance. After the change, the security group contains a single rule that allows inbound SSH traffic from a specific IP address. The company must resolve the connectivity issue. Which solution will meet this requirement?
Options
- AAdd an inbound rule that allows all TCP traffic on all TCP ports. Set the security group as the
- BAdd an inbound rule that allows all TCP traffic on all UDP ports. Set the private IP address of the
- CAdd an inbound rule that allows all TCP traffic on all TCP ports. Set the DNS name of the RDS
- DReplace the source of the existing SSH rule with the private IP address of the RDS instance.
How the community answered
(46 responses)- A85% (39)
- B4% (2)
- C2% (1)
- D9% (4)
Explanation
Since both the RDS instance and the Glue jobs share the same security group, allowing that security group as the source for inbound TCP traffic (on all ports) immediately restores connectivity from the Glue-attached ENIs to the database. This single rule change requires no additional infrastructure and incurs no extra maintenance.
Topics
Community Discussion
No community discussion yet for this question.