You are responsible for several EC2 instances deployed from Amazon AMIs that are required to upload information to an S3 bucket. This information must not traverse the public internet. You must also be able to update the instances. Which option is your best solution?

A. An S3 endpoint and a NAT

B. An S3 endpoint

C. A VPN to the IP addresses specified in the AWS official S3 prefix list

D. A NACL with the AWS prefix list added to it and a VPN.








 

Suggested Answer: B

Community Answer: A

A NAT is not required as an S3 endpoint will allow an instance to update. C and D are not possible.


This question is in ANS-C00 AWS Certified Advanced Networking – Specialty Exam
For getting AWS Certified Advanced Networking – Specialty Certificate

Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.