A start up company hosts a fleet of Amazon EC2 instances in private subnets using the latest Amazon Linux 2 AMI. The company's engineers rely heavily on SSH access to the instances for troubleshooting. The company's existing architecture includes the following:

A VPC with private and public subnets, and a NAT gateway

Site-to-Site VPN for connectivity with the on-premises environment

EC2 security groups with direct SSH access from the on-premises

environment The company needs to increase security controls around SSH access and provide auditing of commands executed by the engineers. Which strategy should a solutions architect use?

Question

A start up company hosts a fleet of Amazon EC2 instances in private subnets using the latest Amazon Linux 2 AMI. The company's engineers rely heavily on SSH access to the instances for troubleshooting. The company's existing architecture includes the following:

A VPC with private and public subnets, and a NAT gateway
Site-to-Site VPN for connectivity with the on-premises environment
EC2 security groups with direct SSH access from the on-premises

environment The company needs to increase security controls around SSH access and provide auditing of commands executed by the engineers. Which strategy should a solutions architect use?

Accepted Answer

D. Create an IAM role with the AmazonSSMManagedInstanceCore managed policy attached. Attach

Answer

A. Install and configure EC2 Instance Connect on the fleet of EC2 instances. Remove all security

Answer

B. Update the EC2 security groups to only allow inbound TCP on port 22 to the IP addresses of the

Answer

C. Update the EC2 security groups to only allow inbound TCP on port 22 to the IP addresses of the

A start up company hosts a fleet of Amazon EC2 instances in private subnets using the latest Amazon Linux 2 AMI. The company's engineers rely heavily on SSH access to the instances for…

Question

Options

How the community answered

Explanation

Community Discussion