nerdexam
Amazon

SAA-C03 · Question #640

A company needs to connect its on-premises network to an Amazon S3 bucket. The on-premises network has no direct internet access. The company already has an AWS Direct Connect connection to AWS. Which

The correct answer is A. Create a public virtual interface (VIF) on the Direct Connect connection. Configure routing to S3. To access Amazon S3 from an on-premises network without internet access, the correct solution is to create a public virtual interface (public VIF) on the existing AWS Direct Connect connection. The public VIF provides private, dedicated network access to AWS public services such

Submitted by valeria.br· Mar 4, 2026Design Secure Architectures

Question

A company needs to connect its on-premises network to an Amazon S3 bucket. The on-premises network has no direct internet access. The company already has an AWS Direct Connect connection to AWS. Which solution will meet these requirements?

Options

  • ACreate a public virtual interface (VIF) on the Direct Connect connection. Configure routing to S3
  • BSet up a VPC with a NAT gateway. Route traffic from the on-premises network through the NAT
  • CCreate a VPC endpoint for the S3 bucket. Route traffic from the on-premises network to the VPC
  • DConfigure VPC peering between the on-premises network and AWS.

How the community answered

(37 responses)
  • A
    78% (29)
  • B
    3% (1)
  • C
    11% (4)
  • D
    8% (3)

Explanation

To access Amazon S3 from an on-premises network without internet access, the correct solution is to create a public virtual interface (public VIF) on the existing AWS Direct Connect connection. The public VIF provides private, dedicated network access to AWS public services such as S3, bypassing the public internet while maintaining high bandwidth and low latency.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice