nerdexam
Amazon

SAP-C02 · Question #399

A company has developed APIs that use Amazon API Gateway with Regional endpoints. The APIs call AWS Lambda functions that use API Gateway authentication mechanisms. After a design review, a…

The correct answer is C. Update the API endpoint from Regional to private in API Gateway. Create an interface VPC. This solution requires the least amount of effort as it only requires to update the API endpoint to private in API Gateway and create an interface VPC endpoint. Then create a resource policy and attach it to the API. This will make the API only accessible from the VPC and still…

Submitted by weili_xi· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

A company has developed APIs that use Amazon API Gateway with Regional endpoints. The APIs call AWS Lambda functions that use API Gateway authentication mechanisms. After a design review, a solutions architect identifies a set of APIs that do not require public access. The solutions architect must design a solution to make the set of APIs accessible only from a VPC. All APIs need to be called with an authenticated user. Which solution will meet these requirements with the LEAST amount of effort?

Options

  • ACreate an internal Application Load Balancer (ALB). Create a target group. Select the Lambda
  • BRemove the DNS entry that is associated with the API in API Gateway. Create a hosted zone in
  • CUpdate the API endpoint from Regional to private in API Gateway. Create an interface VPC
  • DDeploy the Lambda functions inside the VPC. Provision an EC2 instance, and install an Apache

How the community answered

(53 responses)
  • A
    8% (4)
  • B
    4% (2)
  • C
    74% (39)
  • D
    15% (8)

Explanation

This solution requires the least amount of effort as it only requires to update the API endpoint to private in API Gateway and create an interface VPC endpoint. Then create a resource policy and attach it to the API. This will make the API only accessible from the VPC and still keep the authentication mechanism intact. https://aws.amazon.com/premiumsupport/knowledge-center/private-api-gateway-vpc-endpoint/ https://aws.amazon.com/api-gateway/features/

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SAP-C02 Practice