SAP-C02 · Question #747
A company is collecting data from a large set of IoT devices. The data is stored in an Amazon S3 data lake. Data scientists perform analytics on Amazon EC2 instances that run in two public subnets in
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #747. The question stem and answer options stay visible for context.
Question
A company is collecting data from a large set of IoT devices. The data is stored in an Amazon S3 data lake. Data scientists perform analytics on Amazon EC2 instances that run in two public subnets in a VPC in a separate AWS account. The data scientists need access to the data lake from the EC2 instances. The EC2 instances already have an assigned role with permissions to access Amazon S3. According to company policies, only authorized networks are allowed to have access to the IoT data. Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)
Options
- ACreate a gateway VPC endpoint for Amazon S3 in the data scientists' VPC.
- BCreate an S3 access point in the data scientists' AWS account for the data lake.
- CUpdate the EC2 instance role. Add a policy with a condition that allows the s3:GetObject action
- DUpdate the VPC route table to route S3 traffic to an S3 access point.
- EAdd an S3 bucket policy with a condition that allows the s3:GetObject action when the value for
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.