You have a bucket and a VPC defined in AWS. You need to ensure that the bucket can only be accessed by the VPC endpoint. How can you accomplish this?

Question

Exhibit

Options

• AModify the security groups for the VPC to allow access to the 53 bucket
• BModify the route tables to allow access for the VPC endpoint
• CModify the IAM Policy for the bucket to allow access for the VPC endpoint
• DModify the bucket Policy for the bucket to allow access for the VPC endpoint

• A
  6% (1)
• B
  13% (2)
• C
  6% (1)
• D
  75% (12)

Explanation

This is mentioned in the AWS Documentation Restricting Access to a Specific VPC Endpoint The following is an example of an S3 bucket policy that restricts access to a specific bucket, examplebucket only from the VPC endpoint with the ID vpce-la2b3c4d. The policy denies all access to the bucket if the specified endpoint is not being used. The aws:sourceVpce condition is used to the specify the endpoint. The aws:sourceVpce condition does not require an ARN for the VPC endpoint resource, only the VPC endpoint ID. For more information about using conditions in a policy, see Specifying Conditions in a Policy. Options A and B are incorrect because using Security Groups nor route tables will help to allow access specifically for that bucke via the VPC endpoint Here you specifically need to ensure the bucket policy is changed. Option C is incorrect because it is the bucket policy that needs to be changed and not the IAM

No community discussion yet for this question.