nerdexam
Amazon

SAP-C02 · Question #10

A company is creating a REST API to share information with six of Its partners based m the United States. The company has created an Amazon API Gateway Regional endpoint. Each of the six partners…

The correct answer is D. Create an AWS WAF web ACL with a rule to allow access to the IP addresses used by the six. A usage plan specifies who can access one or more deployed API stages and methods - and also how much and how fast they can access them. The plan uses API keys to identify API clients and meters access to the associated API stages for each key. It also lets you configure…

Submitted by klara.se· Mar 6, 2026Design Secure Architectures

Question

A company is creating a REST API to share information with six of Its partners based m the United States. The company has created an Amazon API Gateway Regional endpoint. Each of the six partners will access the API once per day to post daily sales figures. After Initial deployment the company observes 1,000 requests per second originating from 500 different IP addresses around the world. The company believes this traffic is originating from a botnet end wants to secure its API while minimizing cost. Which approach should the company take to secure its API?

Options

  • ACreate an Amazon CloudFront distribution with the API as the origin.
  • BCreate an Amazon CloudFront distribution with the API as the origin.
  • CCreate an AWS WAF web ACL with a rule to allow access to the IP addresses used by the six
  • DCreate an AWS WAF web ACL with a rule to allow access to the IP addresses used by the six

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    17% (5)
  • D
    70% (21)

Explanation

A usage plan specifies who can access one or more deployed API stages and methods - and also how much and how fast they can access them. The plan uses API keys to identify API clients and meters access to the associated API stages for each key. It also lets you configure throttling limits and quota limits that are enforced on individual client API keys. https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-api-usage-

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SAP-C02 Practice