AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 612

Question

A company has an application that runs on Amazon EC2 instances in a private subnet. The application needs to process sensitive information from an Amazon S3 bucket. The application must not use the internet to connect to the S3 bucket. Which solution will meet these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Configure a VPC endpoint. Update the S3 bucket policy to allow access from the VPC endpoint. Update the application to use the new VPC endpoint. Amazon S3 provides durable, scalable object storage that is fully managed. A VPC endpoint provides private connectivity to AWS services without traversing the public internet. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 612