Amazon
SOA-C02 · Question #623
A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not have outbound internet access. A user logs in to an Amazon EC2 instance in one of th
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #623. The question stem and answer options stay visible for context.
Submitted by omar99· Mar 30, 2026Networking and Content Delivery
Question
A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not have outbound internet access. A user logs in to an Amazon EC2 instance in one of the private subnets and cannot upload a file to an Amazon S3 bucket in the same AWS Region. Which solution will solve this problem?
Options
- AUpdate the EC2 instance role policy to include s3:PutObject access to the target S3 bucket.
- BUpdate the EC2 security group to allow outbound traffic to 0.0.0.0/0 for port 80.
- CUpdate the EC2 subnet route table to include the S3 prefix list destination routes to the S3
- DUpdate the S3 bucket policy to allow s3:PutObject access from the private subnet CIDR block.
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#S3 gateway endpoint#VPC route table#private subnet#prefix list routing