AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 52

Question

A network engineer needs to standardize a company's approach to centralizing and managing interface VPC endpoints for private communication with AWS services. The company uses AWS Transit Gateway for inter-VPC connectivity between AWS accounts through a hub-and-spoke model. The company's network services team must manage all Amazon Route 53 zones and interface endpoints within a shared services AWS account. The company wants to use this centralized model to provide AWS resources with access to AWS Key Management Service (AWS KMS) without sending traffic over the public internet. What should the network engineer do to meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: In the shared services account, create an interface endpoint for AWS KMS. Modify the interface endpoint by disabling the private DNS name. Create a private hosted zone in the shared services account with an alias reco... AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 52