Topic 1 Question 612
A company has an application that runs on Amazon EC2 instances in a private subnet. The application needs to process sensitive information from an Amazon S3 bucket. The application must not use the internet to connect to the S3 bucket.
Which solution will meet these requirements?
Configure an internet gateway. Update the S3 bucket policy to allow access from the internet gateway. Update the application to use the new internet gateway.
Configure a VPN connection. Update the S3 bucket policy to allow access from the VPN connection. Update the application to use the new VPN connection.
Configure a NAT gateway. Update the S3 bucket policy to allow access from the NAT gateway. Update the application to use the new NAT gateway.
Configure a VPC endpoint. Update the S3 bucket policy to allow access from the VPC endpoint. Update the application to use the new VPC endpoint.
ユーザの投票
コメント(8)
- 正解だと思う選択肢: D
The solution that will meet these requirements is to:
Configure a VPC endpoint for Amazon S3 Update the S3 bucket policy to allow access from the VPC endpoint Update the application to use the new VPC endpoint The key reasons are:
VPC endpoints allow private connectivity from VPCs to AWS services like S3 without using an internet gateway. The application can connect to S3 through the VPC endpoint while remaining in the private subnet, without internet access.
👍 6Guru4Cloud2023/09/23 - 正解だと思う選択肢: D
A VPC endpoint is a managed endpoint in your VPC that is connected to a public AWS service. It provides a private connection between your VPC and the service, and it does not require an internet gateway or a NAT device.
Option A (internet gateway) would involve exposing the S3 bucket to the internet, which is not recommended for security reasons.
Option B (VPN connection) would require additional setup and would still involve traffic going over the internet.
Option C (NAT gateway) is used for outbound internet access from private subnets, not for accessing S3 without the internet.
👍 4nnecode2023/09/22 - 正解だと思う選択肢: D
VPC Endpoint for S3.
👍 2taustin22023/09/22
シャッフルモード