nerdexam
Amazon

SAA-C03 · Question #31

A company hosts its application on several Amazon EC2 instances inside a VPC. The company creates a dedicated Amazon S3 bucket for each customer to store their relevant information in Amazon S3. The c

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #31. The question stem and answer options stay visible for context.

Submitted by carter_n· Mar 4, 2026Design Secure Architectures

Question

A company hosts its application on several Amazon EC2 instances inside a VPC. The company creates a dedicated Amazon S3 bucket for each customer to store their relevant information in Amazon S3. The company wants to ensure that the application running on EC2 instances can securely access only the S3 buckets that belong to the company's AWS account. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • ACreate a gateway endpoint for Amazon S3 that is attached to the VPC Update the IAM instance
  • BCreate a NAT gateway in a public subnet with a security group that allows access to only Amazon
  • CCreate a gateway endpoint for Amazon S3 that is attached to the VPC Update the IAM instance
  • DCreate a NAT Gateway in a public subnet Update route tables to use the NAT Gateway Assign

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 Practice