AWS SAP-C02 · Question 31 · Domain 1.1: Network Connectivity
A company has a hybrid architecture with an AWS Direct Connect connection between their on-premises data center and a VPC. They are deploying a new application in the VPC that requires access to Amazon S3. The security team mandates that traffic to S3 must not traverse the public internet and must not use the Direct Connect connection to route back through on-premises proxies. How should the Architect configure access to S3?
Answer options:
Create a Gateway VPC Endpoint for Amazon S3 in the VPC and update the route tables.
Create an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3 in the VPC.
Deploy a NAT Gateway in a public subnet and route S3 traffic through it.
Configure a public Virtual Interface (VIF) on the Direct Connect connection.
75 questions · hints · full answers · grading
Expert