SAP-C02 · Question #836
A company hosts a metadata API on Amazon EC2 instances behind an internet-facing Application Load Balancer (ALB). Only internal applications that run on EC2 instances in separate AWS accounts need…
The correct answer is D. Create an internal ALB. Register the metadata API's EC2 instances with the internal ALB. Creating an internal Application Load Balancer (ALB) and registering the metadata API's EC2 instances with it ensures that the API is accessible only within the private network, without exposing it to the public internet. Using AWS PrivateLink allows secure and private…
Question
A company hosts a metadata API on Amazon EC2 instances behind an internet-facing Application Load Balancer (ALB). Only internal applications that run on EC2 instances in separate AWS accounts need to access the metadata API. All the internal EC2 instances use NAT gateways. A new policy requires that traffic between internal applications must not travel across the public internet. Which solution will meet this requirement?
Options
- ACreate an HTTP API in Amazon API Gateway. Configure a route for the metadata API. Configure
- BCreate a REST API in Amazon API Gateway. Specify the API Gateway endpoint type as private.
- CCreate an internal ALB. Register the metadata API's EC2 instances with the internal ALB. Create
- DCreate an internal ALB. Register the metadata API's EC2 instances with the internal ALB.
How the community answered
(19 responses)- A16% (3)
- C11% (2)
- D74% (14)
Explanation
Creating an internal Application Load Balancer (ALB) and registering the metadata API's EC2 instances with it ensures that the API is accessible only within the private network, without exposing it to the public internet. Using AWS PrivateLink allows secure and private connectivity between the internal applications and the ALB. By configuring the PrivateLink endpoint service for the internal ALB and granting access to the internal applications, traffic will be routed securely over the AWS private network, meeting the requirement that traffic does not travel across the public internet.
Community Discussion
No community discussion yet for this question.