SAP-C02 · Question #510
A company has a data lake in Amazon S3 that needs to be accessed by hundreds of applications across many AWS accounts. The company's information security policy states that the S3 bucket must not be…
The correct answer is A. Create an S3 access point for each application in the AWS account that owns the S3 bucket. C. Create a gateway endpoint for Amazon S3 in each application's VPConfigure the endpoint policy. https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html You can access Amazon S3 from your VPC using gateway VPC endpoints. After you create the gateway endpoint, you can add it as a target in your route table for traffic destined from your VPC
Question
A company has a data lake in Amazon S3 that needs to be accessed by hundreds of applications across many AWS accounts. The company's information security policy states that the S3 bucket must not be accessed over the public internet and that each application should have the minimum permissions necessary to function. To meet these requirements, a solutions architect plans to use an S3 access point that is restricted to specific VPCs for each application. Which combination of steps should the solutions architect take to implement this solution? (Choose two.)
Options
- ACreate an S3 access point for each application in the AWS account that owns the S3 bucket.
- BCreate an interface endpoint for Amazon S3 in each application's VPC. Configure the endpoint
- CCreate a gateway endpoint for Amazon S3 in each application's VPConfigure the endpoint policy
- DCreate an S3 access point for each application in each AWS account and attach the access
- ECreate a gateway endpoint for Amazon S3 in the data lake's VPC. Attach an endpoint policy to
How the community answered
(33 responses)- A70% (23)
- B18% (6)
- D6% (2)
- E6% (2)
Explanation
https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html You can access Amazon S3 from your VPC using gateway VPC endpoints. After you create the gateway endpoint, you can add it as a target in your route table for traffic destined from your VPC
Community Discussion
No community discussion yet for this question.