SAA-C03 · Question #809
A company wants to use AWS Systems Manager to manage a fleet of Amazon EC2 instances. According to the company's security requirements, no EC2 instances can have internet access. A solutions…
The correct answer is B. Configure an interface VPC endpoint for Systems Manager. Update routes to use the endpoint. Configuring an interface VPC endpoint for Systems Manager enables private connectivity between EC2 instances in a private subnet and Systems Manager without requiring internet access, fully meeting the security requirement while minimizing operational overhead.
Question
A company wants to use AWS Systems Manager to manage a fleet of Amazon EC2 instances. According to the company’s security requirements, no EC2 instances can have internet access. A solutions architect needs to design network connectivity from the EC2 instances to Systems Manager while fulfilling this security obligation. Which solution will meet these requirements?
Options
- ADeploy the EC2 instances into a private subnet with no route to the internet.
- BConfigure an interface VPC endpoint for Systems Manager. Update routes to use the endpoint.
- CDeploy a NAT gateway into a public subnet. Configure private subnets with a default route to the
- DDeploy an internet gateway. Configure a network ACL to deny traffic to all destinations except
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- D4% (1)
Explanation
Configuring an interface VPC endpoint for Systems Manager enables private connectivity between EC2 instances in a private subnet and Systems Manager without requiring internet access, fully meeting the security requirement while minimizing operational overhead.
Community Discussion
No community discussion yet for this question.