ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 366 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02
Question #: 366
Topic #: 1
[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data. The API must be accessible only from an application that is deployed in a VPC. The company deploys the API successfully. However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.

Which solution will provide connectivity between the EC2 instance and the API?

  • A. Create an interface VPC endpoint for API Gateway. Attach an endpoint policy that allows apigateway:* actions. Disable private DNS naming for the VPC endpoint. Configure an API resource policy that allows access from the VPC. Use the VPC endpoint's DNS name to access the API.
  • B. Create an interface VPC endpoint for API Gateway. Attach an endpoint policy that allows the execute-api:Invoke action. Enable private DNS naming for the VPC endpoint. Configure an API resource policy that allows access from the VPC endpoint. Use the API endpoint’s DNS names to access the API.
  • C. Create a Network Load Balancer (NLB) and a VPC link. Configure private integration between API Gateway and the NLB. Use the API endpoint’s DNS names to access the API.
  • D. Create an Application Load Balancer (ALB) and a VPC Link. Configure private integration between API Gateway and the ALB. Use the ALB endpoint’s DNS name to access the API.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by cypkir at Nov. 22, 2023, 7:43 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
cypkir
Highly Voted 1 year, 5 months ago
Selected Answer: B
Answer: B
upvoted 6 times
...
AzureDP900
Most Recent 5 months, 2 weeks ago
B is correct Creating an interface VPC endpoint for API Gateway allows the EC2 instance to access the API without having to traverse the internet. Attaching an endpoint policy that allows the execute-api:Invoke action enables the EC2 instance to invoke the API, but only if it has the necessary permissions and credentials. Enabling private DNS naming for the VPC endpoint ensures that the EC2 instance can use the endpoint's DNS name to access the API. Configuring an API resource policy that allows access from the VPC endpoint enables the EC2 instance to access the API without having to authenticate again.
upvoted 1 times
...
tushar321
1 year ago
C. Why not C here ?
upvoted 2 times
...
career360guru
1 year, 3 months ago
Selected Answer: B
Option B
upvoted 1 times
...
ayadmawla
1 year, 4 months ago
Selected Answer: B
Answer B. Enable Private naming for VPC Endpoint
upvoted 3 times
...
shaaam80
1 year, 4 months ago
Selected Answer: B
Answer B. Enable Private naming for VPC Endpoint
upvoted 3 times
...
nublit
1 year, 4 months ago
Selected Answer: B
B is correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago