Topic 1 Question 142

AWS Certified Security - Specialty

Topic 1 Question 142
A company has two AWS accounts: Account A and Account B. Each account has a VPC. An application that runs in the VPC in Account A needs to write to an Amazon S3 bucket in Account B. The application in Account A already has permission to write to the S3 bucket in Account B.

The application and the S3 bucket are in the same AWS Region. The company cannot send network traffic over the public internet.

Which solution will meet these requirements?
- In both accounts, create a transit gateway and VPC attachments in a subnet in each Availability Zone. Update the VPC route tables.
- Deploy a software VPN appliance in Account A. Create a VPN connection between the software VPN appliance and a virtual private gateway in Account B.
- Create a VPC peering connection between the VPC in Account A and the VPC in Account B. Update the VPC route tables, network ACLs, and security groups to allow network traffic between the peered IP ranges
- In Account A, create a gateway VPC endpoint for Amazon S3. Update the VPC route table in Account A.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: D
  D 100000%%
  
  👍 4
  Certified1012024/05/19
- C A. Transit Gateway: While transit gateways can connect multiple VPCs, they are more complex to set up and manage compared to VPC peering for this specific scenario. They might be a better choice for intricate multi-account VPC connectivity needs. B. Software VPN: A software VPN creates a secure tunnel over the internet, which violates the requirement of avoiding public internet traffic. Additionally, VPNs can introduce performance overhead and management complexity. D. Gateway VPC Endpoint for S3: This option utilizes a Gateway VPC endpoint for S3 access within the VPC in Account A. However, it only allows access to S3 within the same account (Account A). The application needs access to the S3 bucket in a different account (Account B).
  
  👍 2
  Nash1012024/05/19
- 正解だと思う選択肢: D
  Both C and D should work, but considering the scenario, it only requires writing to S3, and D has less operational overhead and better performance.
  
  👍 2
  VerRi2024/08/27
シャッフルモード

ユーザの投票

コメント(6)