AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 299

Question

A company runs workloads on Amazon EC2 instances in VPCs. The EC2 instances make requests to Amazon S3 buckets through VPC endpoints. The company uses AWS Organizations to manage its AWS accounts. The company needs the requests from the EC2 instances to originate from the same VPC that the EC2 instance credentials were issued to. Which solution will meet this requirement?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Limit all actions in the S3 bucket policies by using the aws:SourceVpc condition key with the value of the allowed VPC ID. Amazon S3 provides durable, scalable object storage that is fully managed.

AWS Certified Security - Specialty SCS-C02 — Question 299