Exam AWS-SysOps topic 1 question 803 discussion

Exam question from Amazon's AWS-SysOps

Question #: 803
Topic #: 1

A Storage team wants all data transfers to an Amazon S3 bucket to remain within the AWS network. The team makes all changes to the AWS network infrastructure manually. An S3 VPC endpoint is created, and an endpoint policy with the proper permissions is set up. However, the application running on
Amazon EC2 instances in the VPC is still unable to access the S3 bucket endpoint.
What is one cause of this issue?

A. Request metrics for the S3 bucket need to be enabled.
B. S3 access logs need to be disabled for the VPC endpoints to function.
C. The subnet does not have the VPC endpoint as a target in the route table.
D. The EC2 instances need to have an Elastic Network Adapter enabled.

Show Suggested Answer

Suggested Answer: B 🗳️

by nicat at May 10, 2020, 4:21 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

kung07

Highly Voted 2 years, 9 months ago

C Specify one or more route tables in which to create routes to the service. Route tables control the routing of traffic between your VPC and the other service. Each subnet that's associated with one of these route tables has access to the endpoint, and traffic from instances in these subnets to the service is then routed through the endpoint. Refer to https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html

upvoted 12 times

...

nicat

Highly Voted 2 years, 9 months ago

C. The subnet does not have the VPC endpoint as a target in the route table.

upvoted 8 times

...

albert_kuo

Most Recent 11 months, 2 weeks ago

Selected Answer: C

When an S3 VPC endpoint is created, the route table of the subnet(s) in the VPC should be updated to include a route that points the traffic destined for the S3 bucket to the VPC endpoint. Without the proper route in the route table, the EC2 instances in the VPC won't know how to direct the traffic intended for the S3 bucket to the VPC endpoint, resulting in the inability to access the S3 bucket through the endpoint.

upvoted 1 times

...