SAA-C03 · Question #661
A solutions architect needs to configure secure access to Amazon EC2 instances that run in private subnets in a VPC. Company policy states that the VPC must have internet access. The solution must pro
The correct answer is D. Use VPC endpoints to implement AWS Systems Manager Session Manager within the VPC.. AWS Systems Manager Session Manager provides secure, audited, browser- or CLI-based access to EC2 instances without opening inbound ports (like SSH) or requiring bastion hosts. By using VPC endpoints for Systems Manager within the VPC, the instances can communicate with SSM priva
Question
A solutions architect needs to configure secure access to Amazon EC2 instances that run in private subnets in a VPC. Company policy states that the VPC must have internet access. The solution must provide company developers with the ability to log in to EC2 instances securely while complying with the company policy. Which solution will meet these requirements?
Options
- AAttach a virtual private gateway to the VPC. Use the virtual private gateway to create an AWS
- BEnable AWS Client VPN within the VPC. Install and configure client VPN software on each
- CConfigure an Amazon EC2 VPC endpoint within the VPC. Update route tables to send all EC2
- DUse VPC endpoints to implement AWS Systems Manager Session Manager within the VPC.
How the community answered
(65 responses)- A2% (1)
- B6% (4)
- C9% (6)
- D83% (54)
Explanation
AWS Systems Manager Session Manager provides secure, audited, browser- or CLI-based access to EC2 instances without opening inbound ports (like SSH) or requiring bastion hosts. By using VPC endpoints for Systems Manager within the VPC, the instances can communicate with SSM privately while the VPC still has internet access to satisfy company policy. Developers then connect through the Session Manager console or CLI to reach instances in private subnets securely and with minimal operational overhead.
Community Discussion
No community discussion yet for this question.