AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 135

Question

A company runs workloads on AWS. The company needs to connect to a service from an external provider. The service is hosted in the provider's VPC. According to the company’s security team, the connectivity must be private and must be restricted to the target service. The connection must be initiated only from the company’s VPC. Which solution will mast these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Ask the provider to create a VPC endpoint for the target service. Use AWS PrivateLink to connect to the target service. A VPC endpoint provides private connectivity to AWS services without traversing the public internet. AWS PrivateLink exposes services privately inside the VPC without internet exposure.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 135