An organization is planning to use NoSQL DB for its scalable data needs. The organization wants to host an application securely in AWS VPC. What action can be recommended to the organization?
A.
The organization should setup their own NoSQL cluster on the AWS instance and configure route tables and subnets.
B.
The organization should only use a DynamoDB because by default it is always a part of the default subnet provided by AWS.
C.
The organization should use a DynamoDB while creating a table within the public subnet.
D.
The organization should use a DynamoDB while creating a table within a private subnet.
Suggested Answer:A🗳️
The Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking environment in a private, isolated section of the Amazon Web Services (AWS) cloud. The user has complete control over the virtual networking environment. Currently VPC does not support DynamoDB. Thus, if the user wants to implement VPC, he has to setup his own NoSQL DB within the VPC. Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html
A is correct
Explanation:
The Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking environment in a private, isolated section of the Amazon Web Services (AWS) cloud. The user has complete control over the virtual networking environment. Currently VPC does not support DynamoDB.
Thus, if the user wants to implement VPC, he has to setup his own NoSQL DB within the VPC.
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html
Feasible solution A . But there is another way to achieve security and performance through VPC endpoints.VPC endpoints for DynamoDB make it possible to define a secure path to access DynamoDB from a VPC. It even enables Amazon EC2 instances in a VPC to use their private IP addresses to access DynamoDB with no exposure to the public internet.
Ref :https://dynobase.dev/dynamodb-vpc/
One more replenishments with respect to the VPC Gateway Endpoint. As of today (Nov 2020), both S3 and DynamoDB are touched via the public range. When those two Gateway Endpoints associated with the route table(s), you will see their public range respectively.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
qianhaopower
Highly Voted 3 years, 7 months agoMichaelHuang
Highly Voted 3 years, 6 months agoamministrazione
Most Recent 8 months, 3 weeks agoSizuma
2 years, 8 months agoHasitha99
3 years, 1 month agocldy
3 years, 5 months agoTerrenceC
3 years, 6 months ago