SCS-C02 · Question #203
A company hosts an application on Amazon EC2 instances. The application also uses Amazon S3 and Amazon Simple Queue Service (Amazon SQS). The application is behind an Application Load Balancer (ALB)…
The correct answer is A. Use an interface VPC endpoint for Amazon SQS C. Use a gateway VPC endpoint for Amazon S3. E. Modify the endpoint policies on all VPC endpoints. Specify the SQS and S3 resources that the. The correct answer is A, C, and E because they provide the most secure and efficient way to implement private connectivity to AWS services. Using interface VPC endpoints for Amazon SQS and gateway VPC endpoints for Amazon S3 allows the application to access these services…
Question
A company hosts an application on Amazon EC2 instances. The application also uses Amazon S3 and Amazon Simple Queue Service (Amazon SQS). The application is behind an Application Load Balancer (ALB) and scales with AWS Auto Scaling. The company's security policy requires the use of least privilege access, which has been applied to all existing AWS resources. A security engineer needs to implement private connectivity to AWS services. Which combination of steps should the security engineer take to meet this requirement? (Choose three.)
Options
- AUse an interface VPC endpoint for Amazon SQS
- BConfigure a connection to Amazon S3 through AWS Transit Gateway.
- CUse a gateway VPC endpoint for Amazon S3.
- DModify the IAM role applied to the EC2 instances in the Auto Scaling group to allow outbound
- EModify the endpoint policies on all VPC endpoints. Specify the SQS and S3 resources that the
- FConfigure a connection to Amazon S3 through AWS Firewall Manager
How the community answered
(26 responses)- A81% (21)
- B12% (3)
- D4% (1)
- F4% (1)
Explanation
The correct answer is A, C, and E because they provide the most secure and efficient way to implement private connectivity to AWS services. Using interface VPC endpoints for Amazon SQS and gateway VPC endpoints for Amazon S3 allows the application to access these services without using public IP addresses or internet gateways. Modifying the endpoint policies on all VPC endpoints enables the security engineer to specify the SQS and S3 resources that the application uses and restrict access to other resources.
Topics
Community Discussion
No community discussion yet for this question.