Exam AWS-SysOps topic 1 question 806 discussion

Exam question from Amazon's AWS-SysOps

Question #: 806
Topic #: 1

An Amazon EC2 instance in a private subnet needs to copy data to an Amazon S3 bucket. For security reasons, the connection from the EC2 instance to Amazon
S3 must not traverse across the Internet.
What action should the SysOps Administrator take to accomplish this?

A. Create a NAT instance and route traffic destined to Amazon S3 through it.
B. Create a VPN connection between the EC2 instance and Amazon S3.
C. Create an S3 VPC endpoint in the VPC where the EC2 instance resides.
D. Use AWS Direct Connect to maximize throughput and keep the traffic private.

Show Suggested Answer

Suggested Answer: D 🗳️

by nicat at May 10, 2020, 4:27 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

nicat

Highly Voted 2 years, 9 months ago

C. Create an S3 VPC endpoint in the VPC where the EC2 instance resides.

upvoted 12 times

...

kung07

Highly Voted 2 years, 9 months ago

C Create an S3 VPC gateway endpoint in the VPC where the EC2 instance resides.

upvoted 7 times

...

albert_kuo

Most Recent 11 months, 2 weeks ago

Selected Answer: C

Option C is the correct choice because an S3 VPC endpoint allows communication between resources within a Virtual Private Cloud (VPC) and Amazon S3 without using the Internet. It provides a secure and private connection between the VPC and S3, ensuring that data transfer between the EC2 instance and S3 stays within the AWS network.

upvoted 1 times

...