ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam
Go to Exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 1016 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03
Question #: 1016
Topic #: 1
[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company runs an application in a private subnet behind an Application Load Balancer (ALB) in a VPC. The VPC has a NAT gateway and an internet gateway. The application calls the Amazon S3 API to store objects.

According to the company's security policy, traffic from the application must not travel across the internet.

Which solution will meet these requirements MOST cost-effectively?

  • A. Configure an S3 interface endpoint. Create a security group that allows outbound traffic to Amazon S3.
  • B. Configure an S3 gateway endpoint. Update the VPC route table to use the endpoint.
  • C. Configure an S3 bucket policy to allow traffic from the Elastic IP address that is assigned to the NAT gateway.
  • D. Create a second NAT gateway in the same subnet where the legacy application is deployed. Update the VPC route table to use the second NAT gateway.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by viejito at Oct. 7, 2024, 5:09 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
sOI852POL
Highly Voted 6 months, 2 weeks ago
Selected Answer: B
S3 gateway endpoint https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html
upvoted 5 times
...
GOTJ
Most Recent 4 months, 1 week ago
Selected Answer: B
Here's another document that support option "B" as the most cost-effectively: https://aws.amazon.com/blogs/architecture/choosing-your-vpc-endpoint-strategy-for-amazon-s3/
upvoted 2 times
...
trinh_le
5 months ago
Selected Answer: B
Keyword: ec2 connect s3 -> vpc endpoint or s3 endpoint
upvoted 3 times
...
aragon_saa
6 months, 2 weeks ago
Selected Answer: B
Answer is B
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago