SCS-C02 · Question #326
You have an Ec2 Instance in a private subnet which needs to access the KMS service. Which of the following methods can help fulfil this requirement, keeping security in perspective
The correct answer is A. Use a VPC endpoint. The AWS Documentation mentions the following You can connect directly to AWS KMS through a private endpoint in your VPC instead of connecting over the internet. When you use a VPC endpoint communication between your VPC and AWS KMS is conducted entirely within the AWS Option B…
Question
You have an Ec2 Instance in a private subnet which needs to access the KMS service. Which of the following methods can help fulfil this requirement, keeping security in perspective
Options
- AUse a VPC endpoint
- BAttach an Internet gateway to the subnet
- CAttach a VPN connection to the VPC
- DUse VPC Peering
How the community answered
(14 responses)- A86% (12)
- B7% (1)
- C7% (1)
Explanation
The AWS Documentation mentions the following You can connect directly to AWS KMS through a private endpoint in your VPC instead of connecting over the internet. When you use a VPC endpoint communication between your VPC and AWS KMS is conducted entirely within the AWS Option B is invalid because this could open threats from the internet Option C is invalid because this is normally used for communication between on-premise environments and AWS. Option D is invalid because this is normally used for communication between VPCs https://docs.aws.amazon.com/kms/ latest/developerguide/kms-vpc-endpoint.html
Topics
Community Discussion
No community discussion yet for this question.