SCS-C02 · Question #74
A company plans to use AWS CodeDeploy to deploy code to multiple Amazon EC2 instances in a VPC at the same time. The company needs to allow the CodeDeploy service to communicate with the instances…
The correct answer is B. Use an interface VPC endpoint for CodeDeploy API operations. You can use interface VPC endpoint to enable CodeDeploy to communicate with your resources on your VPC without going through the public internet. https://docs.aws.amazon.com/codedeploy/latest/userguide/vpc-endpoints.html
Question
A company plans to use AWS CodeDeploy to deploy code to multiple Amazon EC2 instances in a VPC at the same time. The company needs to allow the CodeDeploy service to communicate with the instances in the VPC without going through the public internet for CodeDeploy API operations. What should a security engineer do to meet this requirement?
Options
- AUse a NAT gateway in the VPC.
- BUse an interface VPC endpoint for CodeDeploy API operations.
- CUse a gateway VPC endpoint for CodeDeploy API operations.
- DUse a VPN connection to the VPC.
How the community answered
(49 responses)- A4% (2)
- B84% (41)
- C10% (5)
- D2% (1)
Explanation
You can use interface VPC endpoint to enable CodeDeploy to communicate with your resources on your VPC without going through the public internet. https://docs.aws.amazon.com/codedeploy/latest/userguide/vpc-endpoints.html
Topics
Community Discussion
No community discussion yet for this question.