AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 200

Question

A company hosts an application on Amazon EC2 instances. The application also uses Amazon S3 and Amazon Simple Queue Service (Amazon SQS). The application is behind an Application Load Balancer (ALB) and scales with AWS Auto Scaling. The company's security policy requires the use of least privilege access, which has been applied to all existing AWS resources. A security engineer needs to implement private connectivity to AWS services. Which combination of steps should the security engineer take to meet this requirement? (Choose three.)

Accepted Answer

Correct answer: A, C, E. The correct answer is A, C, E. Option A: Use an interface VPC endpoint for Amazon SQS. Option C: Use a gateway VPC endpoint for Amazon S3. Option E: Modify the endpoint policies on all VPC endpoints. Specify the SQS and S3 resources that the application uses. Amazon S3 provides durable, scalable object storage that is fully managed. A gateway VPC endpoint gives private, no-cost access to Amazon S3 and DynamoDB from within the VPC. A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

AWS Certified Security - Specialty SCS-C02 — Question 200