SAP-C02 · Question #485
A company is running an application in the AWS Cloud. The application consists of microservices that run on a fleet of Amazon EC2 instances in multiple Availability Zones behind an Application Load…
The correct answer is B. Create an interface VPC endpoint for API Gateway, and set an endpoint policy to only allow. By implementing this solution, the company can ensure that the new API in API Gateway is not accessible from the public internet. The interface VPC endpoint provides private connectivity, allowing secure communication between the microservices running on EC2 instances and the…
Question
A company is running an application in the AWS Cloud. The application consists of microservices that run on a fleet of Amazon EC2 instances in multiple Availability Zones behind an Application Load Balancer. The company recently added a new REST API that was implemented in Amazon API Gateway. Some of the older microservices that run on EC2 instances need to call this new API. The company does not want the API to be accessible from the public internet and does not want proprietary data to traverse the public internet. What should a solutions architect do to meet these requirements?
Options
- ACreate an AWS Site-to-Site VPN connection between the VPC and the API Gateway. Use API
- BCreate an interface VPC endpoint for API Gateway, and set an endpoint policy to only allow
- CModify the API Gateway to use IAM authentication. Update the IAM policy for the IAM role that is
- DCreate an accelerator in AWS Global Accelerator, and connect the accelerator to the API
How the community answered
(36 responses)- A17% (6)
- B72% (26)
- C3% (1)
- D8% (3)
Explanation
By implementing this solution, the company can ensure that the new API in API Gateway is not accessible from the public internet. The interface VPC endpoint provides private connectivity, allowing secure communication between the microservices running on EC2 instances and the API Gateway. This ensures the proprietary data does not traverse the public internet, enhancing security and data protection.
Community Discussion
No community discussion yet for this question.