Amazon
SOA-C02 · Question #262
A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented…
The correct answer is A. Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
Submitted by ashley.k· Mar 30, 2026Networking and Content Delivery
Question
A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented a strict IP allow list that requires all build uploads to come from a single IP address. What change should the systems administrator make to the existing build fleet to comply with this new requirement?
Options
- AMove all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the
- BMove all of the EC2 instances behind an internet gateway and provide the gateway IP address to
- CMove all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP
- DMove all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.
How the community answered
(52 responses)- A79% (41)
- B2% (1)
- C13% (7)
- D6% (3)
Explanation
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
Topics
#NAT gateway#egress IP#EC2 fleet#IP allow list
Community Discussion
No community discussion yet for this question.