SAA-C03 · Question #766
A company has deployed a non-production Amazon EC2 instance by using an Amazon Linux Amazon Machine Image (AMI) in a private subnet. The company wants to allow a group of developers to connect to…
The correct answer is A. Create a VPC endpoint for AWS Systems Manager in the same subnet as the EC2 instance. AWS Systems Manager (SSM) allows secure SSH access to EC2 instances in private subnets without requiring internet access. By creating a VPC endpoint for SSM and attaching the AmazonSSMManagedInstanceCore policy to the EC2 instance, developers can connect through the AWS…
Question
A company has deployed a non-production Amazon EC2 instance by using an Amazon Linux Amazon Machine Image (AMI) in a private subnet. The company wants to allow a group of developers to connect to the EC2 instance remotely by using SSH without exposing the EC2 instance to the internet. The developers must be able to connect to the EC2 instance through the AWS Management Console. Which solution will meet these requirements?
Options
- ACreate a VPC endpoint for AWS Systems Manager in the same subnet as the EC2 instance.
- BCreate an EC2 Instance Connect Endpoint in the same subnet as the EC2 instance. Attach a
- CCreate an EC2 Instance Connect Endpoint in the same subnet as the EC2 instance. Attach a
- DCreate a VPC endpoint for AWS Systems Manager in the same subnet as the EC2 instance.
How the community answered
(49 responses)- A73% (36)
- B16% (8)
- C4% (2)
- D6% (3)
Explanation
AWS Systems Manager (SSM) allows secure SSH access to EC2 instances in private subnets without requiring internet access. By creating a VPC endpoint for SSM and attaching the AmazonSSMManagedInstanceCore policy to the EC2 instance, developers can connect through the AWS Management Console using Session Manager, satisfying the requirement for remote access without exposing the instance to the internet.
Community Discussion
No community discussion yet for this question.