Amazon
SOA-C02 · Question #32
A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps administrator take…
The correct answer is B. Create a VPC endpoint for the S3 bucket, and create an S3 bucket policy that conditionally limits. https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies-vpc-
Submitted by tunde_lagos· Mar 30, 2026Security and Compliance
Question
A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps administrator take to meet these requirements?
Options
- ACreate a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits all S3
- BCreate a VPC endpoint for the S3 bucket, and create an S3 bucket policy that conditionally limits
- CCreate a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly
- DCreate a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for
How the community answered
(36 responses)- A14% (5)
- B75% (27)
- C3% (1)
- D8% (3)
Explanation
https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies-vpc-
Topics
#VPC endpoint#S3 bucket policy#private network access#access restriction
Community Discussion
No community discussion yet for this question.