Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 292 discussion

A is correct B is incorrect because for Publicly accessible endpoints for AWS Transfer Family you can’t attach a static IP address. AWS provides IP addresses that are subject to change. IPs are provided via AWS Global Accelerator, which uses static Anycast IP addresses https://repost.aws/knowledge-center/aws-sftp-endpoint-type

Public endpoint configuration is on Transfer Family server and not on VPC. So Answer is B and A. A VPC Endpoint is a service that allows resources within your VPC to connect to other AWS services privately.

A is wrong. The use of an internet-facing VPC endpoint for AWS Transfer Family is not necessary here. The publicly accessible endpoint provided by AWS Transfer Family itself meets the requirement for external access. Also, assigning Elastic IPs to subnets is unnecessary because AWS Transfer Family manages public IPs.

a IS ANS Here's why this solution is optimal: Managed SFTP: AWS Transfer Family eliminates the need to manage and maintain SFTP servers, reducing operational overhead compared to EC2-based solutions. High availability: It provides built-in high availability, ensuring continuous access to SFTP services even in case of component failures. Static IP addresses: The internet-facing VPC endpoint with Elastic IP addresses provides fixed IPs for external vendors, meeting their security requirements. Secure file storage: EFS offers a managed, scalable, and highly available file system, ensuring secure file storage and access for downstream applications. NFS compatibility: EFS integrates seamlessly with NFS, allowing easy migration of downstream applications to the new file system.

Option A

Correct A.

AAAAAAAAA

its an A.. static IPs

It's A. You can't have elastic IP with B.

A https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/migrate-an-on-premises-sftp-server-to-aws-using-aws-transfer-for-sftp.html

Option A suggests creating an AWS Transfer Family server and configuring an internet-facing VPC endpoint for it. By specifying an Elastic IP address for each subnet, the company can provide a set of static public IP addresses to external vendors. The Transfer Family server can be configured to place files into an Amazon Elastic File System (Amazon EFS) file system, which provides a scalable and highly available storage solution across multiple Availability Zones. This allows the company to maintain high availability for the SFTP site and its downstream applications without the need for manual intervention or additional operational overhead.

A is correct for Pvt IP addresses.

A is correct In B there is NO mention of elasticIPs. the question asks "The solution must provide external vendors with a set of static public IP addresses that the vendors can allow"

Correct Answer is A