nerdexam
Amazon

SAA-C03 · Question #469

A company has deployed a multi-tier web application to support a website. The architecture includes an Application Load Balancer (ALB) in public subnets, two Amazon Elastic Container Service (Amazon E

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #469. The question stem and answer options stay visible for context.

Submitted by miguelv· Mar 4, 2026Design Secure Architectures

Question

A company has deployed a multi-tier web application to support a website. The architecture includes an Application Load Balancer (ALB) in public subnets, two Amazon Elastic Container Service (Amazon ECS) tasks in the public subnets, and a PostgreSQL cluster that runs on Amazon EC2 instances in private subnets. The EC2 instances that host the PostgreSQL database run shell scripts that need to access an external API to retrieve product information. A solutions architect must design a solution to allow the EC2 instances to securely communicate with the external API without increasing operational overhead. Which solution will meet these requirements?

Options

  • AAssign public IP addresses to the EC2 instances in the private subnets. Configure security groups
  • BConfigure a NAT gateway in the public subnets. Update the route table for the private subnets to
  • CConfigure a VPC peering connection between the private subnets and a public subnet that has
  • DDeploy an interface VPC endpoint to securely connect to the external API.

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 Practice