SAA-C03 · Question #266
An internal product team is deploying a new application to a private VPC in a company's AWS account. The application runs on Amazon EC2 instances that are in a security group named App1. The EC2…
The correct answer is B. Configure interface VPC endpoints for Amazon S3 and AWS Secrets Manager. C. Add routes to the endpoints in the VPC route table. To securely access AWS services like S3 and Secrets Manager from a private VPC without using public IPs, interface VPC endpoints are required. These endpoints are accessible via private IP addresses. For the application to reach these endpoints, appropriate routes must be…
Question
An internal product team is deploying a new application to a private VPC in a company's AWS account. The application runs on Amazon EC2 instances that are in a security group named App1. The EC2 instances store application data in an Amazon S3 bucket and use AWS Secrets Manager to store application service credentials. The company's security policy prohibits applications in a private VPC from using public IP addresses to communicate. Which combination of solutions will meet these requirements? (Select TWO.)
Options
- AConfigure gateway endpoints for Amazon S3 and AWS Secrets Manager.
- BConfigure interface VPC endpoints for Amazon S3 and AWS Secrets Manager.
- CAdd routes to the endpoints in the VPC route table.
- DAssociate the App1 security group with the interface VPC endpoints. Configure a self-referencing
- EAssociate the App1 security group with the gateway endpoints. Configure a self-referencing
How the community answered
(55 responses)- A16% (9)
- B69% (38)
- D9% (5)
- E5% (3)
Explanation
To securely access AWS services like S3 and Secrets Manager from a private VPC without using public IPs, interface VPC endpoints are required. These endpoints are accessible via private IP addresses. For the application to reach these endpoints, appropriate routes must be configured in the route table.
Community Discussion
No community discussion yet for this question.