SAA-C03 · Question #30
A company has an application that serves clients that are deployed in more than 20.000 retail storefront locations around the world. The application consists of backend web services that are exposed…
The correct answer is A. Associate an AWS WAF web ACL with the ALB Use IP rule sets on the ALB to filter traffic Update. AWS WAF (Web Application Firewall): AWS WAF allows you to create custom rules to block or allow web requests based on conditions that you specify. Web ACL (Access Control List): Create a web ACL and associate it with the ALB. Use IP rule sets to specify the IP addresses of the…
Question
A company has an application that serves clients that are deployed in more than 20.000 retail storefront locations around the world. The application consists of backend web services that are exposed over HTTPS on port 443 The application is hosted on Amazon EC2 Instances behind an Application Load Balancer (ALB). The retail locations communicate with the web application over the public internet. The company allows each retail location to register the IP address that the retail location has been allocated by its local ISP. The company's security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations. What should a solutions architect do to meet these requirements?
Options
- AAssociate an AWS WAF web ACL with the ALB Use IP rule sets on the ALB to filter traffic Update
- BDeploy AWS Firewall Manager to manage the ALB. Configure firewall rules to restrict traffic to the
- CStore the IP addresses in an Amazon DynamoDB table. Configure an AWS Lambda authorization
- DConfigure the network ACL on the subnet that contains the public interface of the ALB Update the
How the community answered
(28 responses)- A75% (21)
- B7% (2)
- C14% (4)
- D4% (1)
Explanation
AWS WAF (Web Application Firewall): AWS WAF allows you to create custom rules to block or allow web requests based on conditions that you specify. Web ACL (Access Control List): Create a web ACL and associate it with the ALB. Use IP rule sets to specify the IP addresses of the retail locations that are allowed to access the Security and Flexibility: AWS WAF provides a scalable way to manage access control, ensuring that only traffic from registered IP addresses is allowed. You can dynamically update the IP rule sets to add or remove IP addresses as needed. Operational Simplicity: Using AWS WAF with a web ACL is straightforward and integrates seamlessly with the ALB, providing an efficient solution for managing access control based on IP
Community Discussion
No community discussion yet for this question.