A company has applications that run on Amazon EC2 instances in a VPC One of the applications needs to call the Amazon S3 API to store and read objects. According to the company's security regulations,

Question

Options

• AConfigure an S3 gateway endpoint.
• BCreate an S3 bucket in a private subnet.
• CCreate an S3 bucket in the same AWS Region as the EC2 instances.
• DConfigure a NAT gateway in the same subnet as the EC2 instances

• A
  91% (40)
• B
  2% (1)
• C
  5% (2)
• D
  2% (1)

Explanation

VPC Endpoint for S3: A gateway endpoint for Amazon S3 enables you to privately connect your VPC to S3 without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. Configuration Steps: In the VPC console, navigate to "Endpoints" and create a new endpoint. Select the service name for S3 (com.amazonaws.region.s3). Choose the VPC and the subnets where your EC2 instances are running. Update the route tables for the selected subnets to include a route pointing to the endpoint. Security Compliance: By configuring an S3 gateway endpoint, all traffic between the VPC and S3 stays within the AWS network, complying with the company's security regulations to avoid internet traversal.

No community discussion yet for this question.