A company has two AWS accounts: Account A and Account B. Each account has a VPC. An application that runs in the VPC in Account A needs to write to an Amazon S3 bucket in Account

The correct answer is D. In Account A, create a gateway VPC endpoint for Amazon S3. Update the VPC route table in. However, gateway endpoints do not allow access from on-premises networks, from peered VPCs in other AWS Regions, or through a transit gateway. For those scenarios, you must use an interface endpoint, which is available for an additional cost…

Submitted by fernanda_arg· Mar 6, 2026Infrastructure Security

Question

Options

AIn both accounts, create a transit gateway and VPC attachments in a subnet in each Availability
BDeploy a software VPN appliance in Account A. Create a VPN connection between the software
CCreate a VPC peering connection between the VPC in Account A and the VPC in Account B.
DIn Account A, create a gateway VPC endpoint for Amazon S3. Update the VPC route table in

How the community answered

(22 responses)

A
5% (1)
B
9% (2)
C
14% (3)
D
73% (16)

Explanation

However, gateway endpoints do not allow access from on-premises networks, from peered VPCs in other AWS Regions, or through a transit gateway. For those scenarios, you must use an interface endpoint, which is available for an additional cost. https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html

Topics

#gateway VPC endpoint#S3#cross-account access#VPC routing

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice