AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 251

Question

An Amazon EC2 instance is located in a private subnet in a new VPC. This subnet does not have outbound internet access, but the EC2 instance needs the ability to download monthly security updates from an outside vendor. What should a solutions architect do to meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a NAT gateway, and place it in a public subnet. Configure the private subnet route table to use the NAT gateway as the default route. A NAT gateway lets private subnet resources reach the internet for outbound traffic only. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 251