Amazon
SCS-C02 · Question #326
You have an Ec2 Instance in a private subnet which needs to access the KMS service. Which of the following methods can help fulfil this requirement, keeping security in perspective
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #326. The question stem and answer options stay visible for context.
Submitted by femi9· Mar 6, 2026Infrastructure Security
Question
You have an Ec2 Instance in a private subnet which needs to access the KMS service. Which of the following methods can help fulfil this requirement, keeping security in perspective
Options
- AUse a VPC endpoint
- BAttach an Internet gateway to the subnet
- CAttach a VPN connection to the VPC
- DUse VPC Peering
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#VPC endpoint#KMS#private subnet#network isolation