Examtopics

AWS Certified SysOps Administrator - Associate
  • Topic 1 Question 253

    A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not have outbound internet access. User logs in to an Amazon EC2 instance in one of the private subnets and cannot upload a file to an Amazon S3 bucket in the same AWS Region.

    Which solution will solve this problem?

    • Update the EC2 instance role policy to include s3:PutObject access to the target S3 bucket.

    • Update the EC2 security group to allow outbound traffic to 0.0.0.0/0 for port 80.

    • Update the EC2 subnet route table to include the S3 prefix list destination routes to the S3 gateway endpoint.

    • Update the S3 bucket policy to allow s3:PutObject access from the private subnet CIDR block.


    シャッフルモード