Amazon
SOA-C02 · Question #332
A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not nave outbound internet access. A user logs in to an Amazon EC2 instance in one of…
The correct answer is C. Update the EC2 subnet route table to include the S3 prefix tot destination routes to the S3. The subnet route table must have an entry pointing to the VPC gateway prefix.
Submitted by helene.fr· Mar 30, 2026Networking and Content Delivery
Question
A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not nave outbound internet access. A user logs in to an Amazon EC2 instance in one of the private subnets and cannot upload a file to an Amazon S3 bucket in the same AWS Region Which solution will solve this problem?
Options
- AUpdate the EC2 instance role policy to include s3:PutObject access to the target S3 bucket.
- BUpdate the EC2 security group to allow outbound traffic to 0.0.0.0/0 for port 80.
- CUpdate the EC2 subnet route table to include the S3 prefix tot destination routes to the S3
- DUpdate the S3 bucket policy to allow s3 PurObject access from the private subnet OOR block.
How the community answered
(22 responses)- A5% (1)
- B5% (1)
- C77% (17)
- D14% (3)
Explanation
The subnet route table must have an entry pointing to the VPC gateway prefix.
Topics
#S3 gateway endpoint#VPC route table#private subnet#S3 access
Community Discussion
No community discussion yet for this question.