Exam AWS Certified Security - Specialty topic 1 question 460 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 460
Topic #: 1

[All AWS Certified Security - Specialty Questions]

A company plans to use AWS CodeDeploy to deploy code to multiple Amazon EC2 instances in a VPC at the same time. The company needs to allow the CodeDeploy service to communicate with the instances in the VPC without going through the public internet for CodeDeploy API operations.

What should a security engineer do to meet this requirement?

A. Use a NAT gateway in the VPC.
B. Use an interface VPC endpoint for CodeDeploy API operations.
C. Use a gateway VPC endpoint for CodeDeploy API operations.
D. Use a VPN connection to the VPC.

Show Suggested Answer

Suggested Answer: B 🗳️

by Teknoklutz at Nov. 28, 2022, 9:53 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

kerar

Highly Voted 2 years, 6 months ago

Selected Answer: B

You can use interface VPC endpoint to enable CodeDeploy to communicate with your resources on your VPC without going through the public internet. https://docs.aws.amazon.com/codedeploy/latest/userguide/vpc-endpoints.html

upvoted 7 times

...

piter8111

Highly Voted 2 years, 6 months ago

Selected Answer: B

You can use interface VPC endpoint

upvoted 6 times

...

jeff001

Most Recent 1 year, 12 months ago

Selected Answer: B

o connect your VPC to CodeDeploy, you define an interface VPC endpoint for CodeDeploy. An interface endpoint is an elastic network interface with a private IP address that serves as an entry point for traffic destined to a supported AWS service.

upvoted 1 times

...

bwestpha

2 years, 3 months ago

Selected Answer: B

ignore my dumb post: its b ...

upvoted 2 times

Andrii223

2 years ago

To connect your VPC to CodeDeploy, you define an interface VPC endpoint for CodeDeploy. An interface endpoint is an elastic network interface with a private IP address that serves as an entry point for traffic destined to a supported AWS service. The endpoint provides reliable, scalable connectivity to CodeDeploy without requiring an internet gateway, network address translation (NAT) instance, or VPN connection. For more information, see What Is Amazon VPC in the Amazon VPC User Guide. Interface VPC endpoints are powered by AWS PrivateLink, an AWS technology that enables private communication between AWS services using an elastic network interface with private IP addresses.

upvoted 2 times

...