DEA-C01 · Question #245
A company manages an Amazon Redshift data warehouse. The data warehouse is in a public subnet inside a custom VPC. A security group allows only traffic from within itself. An ACL is open to all…
The correct answer is A. Configure the Redshift security group to allow inbound traffic on the Redshift port from the. Because your Redshift cluster is publicly accessible in its VPC and QuickSight runs in a separate VPC and account, you simply need to allow QuickSight's outbound connections through the Redshift security group. By adding an inbound rule on the Redshift SG that permits traffic…
Question
A company manages an Amazon Redshift data warehouse. The data warehouse is in a public subnet inside a custom VPC. A security group allows only traffic from within itself. An ACL is open to all traffic. The company wants to generate several visualizations in Amazon QuickSight for an upcoming sales event. The company will run QuickSight Enterprise edition in a second AWS account inside a public subnet within a second custom VPC. The new public subnet has a security group that allows outbound traffic to the existing Redshift cluster. A data engineer needs to establish connections between Amazon Redshift and QuickSight. QuickSight must refresh dashboards by querying the Redshift cluster. Which solution will meet these requirements?
Options
- AConfigure the Redshift security group to allow inbound traffic on the Redshift port from the
- BAssign Elastic IP addresses to the QuickSight visualizations. Configure the QuickSight security
- CConfirm that the CIDR ranges of the Redshift VPC and the QuickSight VPC are the same. If CIDR
- DCreate a QuickSight gateway endpoint in the Redshift VPC. Attach an endpoint policy to the
How the community answered
(39 responses)- A79% (31)
- B3% (1)
- C13% (5)
- D5% (2)
Explanation
Because your Redshift cluster is publicly accessible in its VPC and QuickSight runs in a separate VPC and account, you simply need to allow QuickSight's outbound connections through the Redshift security group. By adding an inbound rule on the Redshift SG that permits traffic on port 5439 (or your cluster's port) from the QuickSight security group, QuickSight can refresh dashboards without any additional infrastructure changes.
Topics
Community Discussion
No community discussion yet for this question.