SAP-C02 · Question #324
A company wants to use a third-party software-as-a-service (SaaS) application. The third-party SaaS application is consumed through several API calls. The third-party SaaS application also runs on AWS
The correct answer is A. Create an AWS PrivateLink interface VPC endpoint. Connect this endpoint to the endpoint. https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-saas.html Note from documentation that Interface Endpoint is at client side. In addition, it can have security groups as https://docs.aws.amazon.com/vpc/latest/privatelink/interface-endpoints.html
Question
A company wants to use a third-party software-as-a-service (SaaS) application. The third-party SaaS application is consumed through several API calls. The third-party SaaS application also runs on AWS inside a VPC. The company will consume the third-party SaaS application from inside a VPC. The company has internal security policies that mandate the use of private connectivity that does not traverse the internet. No resources that run in the company VPC are allowed to be accessed from outside the company's VPC. All permissions must conform to the principles of least privilege. Which solution meets these requirements?
Options
- ACreate an AWS PrivateLink interface VPC endpoint. Connect this endpoint to the endpoint
- BCreate an AWS Site-to-Site VPN connection between the third-party SaaS application and the
- CCreate a VPC peering connection between the third-party SaaS application and the company
- DCreate an AWS PrivateLink endpoint service. Ask the third-party SaaS provider to create an
How the community answered
(52 responses)- A81% (42)
- B4% (2)
- C4% (2)
- D12% (6)
Explanation
https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-saas.html Note from documentation that Interface Endpoint is at client side. In addition, it can have security groups as https://docs.aws.amazon.com/vpc/latest/privatelink/interface-endpoints.html
Community Discussion
No community discussion yet for this question.