Topic 1 Question 200
3 つ選択A company hosts an application on Amazon EC2 instances. The application also uses Amazon S3 and Amazon Simple Queue Service (Amazon SQS). The application is behind an Application Load Balancer (ALB) and scales with AWS Auto Scaling.
The company's security policy requires the use of least privilege access, which has been applied to all existing AWS resources. A security engineer needs to implement private connectivity to AWS services.
Which combination of steps should the security engineer take to meet this requirement?
Use an interface VPC endpoint for Amazon SQS.
Configure a connection to Amazon S3 through AWS Transit Gateway.
Use a gateway VPC endpoint for Amazon S3.
Modify the IAM role applied to the EC2 instances in the Auto Scaling group to allow outbound traffic to the interface endpoints.
Modify the endpoint policies on all VPC endpoints. Specify the SQS and S3 resources that the application uses.
Configure a connection to Amazon S3 through AWS Firewall Manager.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: ACE
These steps ensure that the application can securely access Amazon S3 and Amazon SQS without traversing the public internet, while also maintaining fine-grained control over which resources can be accessed
👍 2IPLogic2024/12/03 - 正解だと思う選択肢: ACE
A - This allows private connectivity to Amazon SQS without traversing the public internet. C - This provides private connectivity to Amazon S3. E-This ensures that only the necessary resources are accessible, adhering to the least privilege principle.
👍 1dhewa2024/10/21
シャッフルモード