SAP-C02 · Question #47
A company requires that all internal application connectivity use private IP addresses. To facilitate this policy, a solutions architect has created interface endpoints to connect to AWS public…
The correct answer is C. Configure the security group on the interface endpoint to allow connectivity to the AWS services. The service name are resolved to public IP address, so the application is using the default DNS name, not the endpoint hostname. So you need to enable private DNS option to resolve it to private address. https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html.
Question
A company requires that all internal application connectivity use private IP addresses. To facilitate this policy, a solutions architect has created interface endpoints to connect to AWS public services. Upon testing, the solutions architect notices that the service names are resolving to public IP addresses, and that internal services cannot connect to the interface endpoints. Which step should the solutions architect take to resolve this issue?
Options
- AUpdate the subnet route table with a route to the interface endpoint.
- BEnable the private DNS option on the VPC attributes.
- CConfigure the security group on the interface endpoint to allow connectivity to the AWS services.
- DConfigure an Amazon Route 53 private hosted zone with a conditional forwarder for the internal
How the community answered
(32 responses)- A22% (7)
- B9% (3)
- C63% (20)
- D6% (2)
Explanation
The service name are resolved to public IP address, so the application is using the default DNS name, not the endpoint hostname. So you need to enable private DNS option to resolve it to private address. https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html.
Community Discussion
No community discussion yet for this question.