A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands. The instances use either the latest AWS-provided Windows Amazon Machine Images (AMIs) or Amazon Linux AMIs. The team has an existing IAM role for authorization. A SysOps administrator must provide the team with access to the instances by granting IAM permissions to this role. Which solution will meet this requirement?

Question

Accepted Answer

A. Add a statement to the IAM role policy to allow the ssm:StartSession action on the instances.

Answer

B. Associate an Elastic IP address and a security group with each instance.

Answer

C. Create a bastion host with an EC2 instance, and associate the bastion host with the VPC.

Answer

D. Create an internet-facing Network Load Balancer.

A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands. The instances use either the latest AWS-provided Windows Amazon…

Question

Options

How the community answered

Explanation

Topics

Community Discussion