SOA-C02 · Question #683
A company has an Amazon EC2 instance that is deployed in an isolated private subnet in a VPC. The EC2 instance needs to access data that is in an Amazon S3 bucket. The company has an S3 gateway…
The correct answer is C. Ensure that the private subnet's route table has a route to the S3 gateway endpoint. E. Ensure that the EC2 instance's security group allows outbound traffic to the prefix list for Amazon. The private subnet’s route table must include a route that directs S3 traffic (destination pl- 68a54001 or similar S3 prefix list) to the gateway endpoint. Without that route, the instance won’t know to use the endpoint. The EC2 security group must allow outbound access to the…
Question
A company has an Amazon EC2 instance that is deployed in an isolated private subnet in a VPC. The EC2 instance needs to access data that is in an Amazon S3 bucket. The company has an S3 gateway endpoint in the VPC. The connection to the S3 bucket is failing for an unknown reason. A SysOps administrator must investigate this issue while keeping the private subnet isolated. Which combination of steps will meet these requirements? (Choose two.)
Options
- ACreate an internet gateway. Ensure that the private subnet's route table has a route to the internet
- BCreate a NAT gateway. Ensure that the private subnet's route table has a route to the NAT
- CEnsure that the private subnet's route table has a route to the S3 gateway endpoint.
- DEnsure that the EC2 instance's security group allows inbound traffic from the prefix list for Amazon
- EEnsure that the EC2 instance's security group allows outbound traffic to the prefix list for Amazon
How the community answered
(33 responses)- A3% (1)
- B3% (1)
- C85% (28)
- D9% (3)
Explanation
The private subnet’s route table must include a route that directs S3 traffic (destination pl- 68a54001 or similar S3 prefix list) to the gateway endpoint. Without that route, the instance won’t know to use the endpoint. The EC2 security group must allow outbound access to the S3 prefix list. Since the connection is initiated from the instance, outbound rules must permit the destination range for S3.
Topics
Community Discussion
No community discussion yet for this question.