SAP-C02 · Question #518
A company is creating a REST API to share information with six of its partners based in the United States. The company has created an Amazon API Gateway Regional endpoint. Each of the six partners…
The correct answer is D. Create an AWS WAF web ACL with a rule to allow access to the IP addresses used by the six. The IP filtering is done with the WAF ACL so there is no need to do another IP filtering by using resource policies which can do exactly that. https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-
Question
A company is creating a REST API to share information with six of its partners based in the United States. The company has created an Amazon API Gateway Regional endpoint. Each of the six partners will access the API once per day to post daily sales figures. After initial deployment, the company observes 1,000 requests per second originating from 500 different IP addresses around the world. The company believes this traffic is originating from a botnet and wants to secure its API while minimizing cost. Which approach should the company take to secure its API?
Options
- ACreate an Amazon CloudFront distribution with the API as the origin. Create an AWS WAF web
- BCreate an Amazon CloudFront distribution with the API as the origin. Create an AWS WAF web
- CCreate an AWS WAF web ACL with a rule to allow access to the IP addresses used by the six
- DCreate an AWS WAF web ACL with a rule to allow access to the IP addresses used by the six
How the community answered
(37 responses)- A11% (4)
- B3% (1)
- C3% (1)
- D84% (31)
Explanation
The IP filtering is done with the WAF ACL so there is no need to do another IP filtering by using resource policies which can do exactly that. https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-
Community Discussion
No community discussion yet for this question.