Examtopics

AWS Certified Solutions Architect - Associate

  • Topic 1 Question 1016

    A company runs an application in a private subnet behind an Application Load Balancer (ALB) in a VPC. The VPC has a NAT gateway and an internet gateway. The application calls the Amazon S3 API to store objects.

    According to the company's security policy, traffic from the application must not travel across the internet.

    Which solution will meet these requirements MOST cost-effectively?

    • Configure an S3 interface endpoint. Create a security group that allows outbound traffic to Amazon S3.

    • Configure an S3 gateway endpoint. Update the VPC route table to use the endpoint.

    • Configure an S3 bucket policy to allow traffic from the Elastic IP address that is assigned to the NAT gateway.

    • Create a second NAT gateway in the same subnet where the legacy application is deployed. Update the VPC route table to use the second NAT gateway.

    シャッフルモード