SAP-C02 · Question #834
A company stores data on an Amazon RDS for PostgreSQL DB instance in a private subnet in an AWS database account. Applications that are deployed in different VPCs access this data from different AWS…
The correct answer is B. Create an RDS proxy in the AWS database account. Create a proxy endpoint in the private. Using RDS Proxy in combination with AWS PrivateLink provides a scalable and secure solution to manage connections to the RDS for PostgreSQL DB instance. RDS Proxy helps manage the number of active connections by pooling and sharing database connections, reducing the load on the…
Question
A company stores data on an Amazon RDS for PostgreSQL DB instance in a private subnet in an AWS database account. Applications that are deployed in different VPCs access this data from different AWS accounts. The company needs to manage the number of active connections to the DB instance. Communication between all accounts and the database account must be private and must not travel across the internet. The solution must be scalable to accommodate more consumer accounts in the future. Which solution will meet these requirements?
Options
- AConnect all the VPCs in all the accounts by using a transit gateway. Configure a NAT gateway in
- BCreate an RDS proxy in the AWS database account. Create a proxy endpoint in the private
- CCreate a VPC peering connection between the VPC that contains the DB instance and each VPC
- DCreate a VPC peering connection between the VPC that contains the DB instance and each VPC
How the community answered
(61 responses)- A11% (7)
- B80% (49)
- C3% (2)
- D5% (3)
Explanation
Using RDS Proxy in combination with AWS PrivateLink provides a scalable and secure solution to manage connections to the RDS for PostgreSQL DB instance. RDS Proxy helps manage the number of active connections by pooling and sharing database connections, reducing the load on the DB instance. AWS PrivateLink allows private communication between VPCs, ensuring that traffic does not travel across the internet. By using a Network Load Balancer (NLB) with PrivateLink, each consumer account can securely access the DB instance without needing complex routing or NAT gateways. This solution is scalable for future accounts and ensures private communication.
Community Discussion
No community discussion yet for this question.