Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 288 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 288
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A business application is hosted on Amazon EC2 and uses Amazon S3 for encrypted object storage. The chief information security officer has directed that no application traffic between the two services should traverse the public internet.
Which capability should the solutions architect use to meet the compliance requirements?

A. AWS Key Management Service (AWS KMS)
B. VPC endpoint
C. Private subnet
D. Virtual private gateway

Show Suggested Answer

Suggested Answer: B 🗳️

by toto059 at Feb. 2, 2021, 12:45 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

toto059

Highly Voted 3 years, 7 months ago

B is correct

upvoted 36 times

...

CCNPWILL

Highly Voted 3 years, 7 months ago

NOT traversing the www = ENDPOINTS

upvoted 15 times

Yogi

3 years, 7 months ago

S3 & DynamoDb are the only ones that permit VP endpoints https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-dynamodb.html

upvoted 3 times

sarah_t

3 years, 7 months ago

almost: the only ones that permit gateway endpoints (which are free). you can have interface endpoints for other services too (they're not free though).

upvoted 1 times

...

PRASAD180

Most Recent 2 years, 1 month ago

B is 100% crt

upvoted 1 times

...

gp3k

2 years, 9 months ago

Why not C (Private subnet)? The question doesn't say it's a web app, it's simply a "business app" that's hosted on EC2. The EC2 and S3 instances can communicate with each other just fine if they're both on the same private subnet, which satisfies the question requirements.

upvoted 2 times

...