Amazon Exam ANS-C00 Topic 19 Question 3 Discussion

Actual exam question for Amazon's ANS-C00 exam

Question #: 3
Topic #: 19

You are deploying an EC2 instance in a private subnet that requires access to the Internet. One of the requirements for this solution is to restrict access to only particular URLs on a whitelist. In addition to the whitelisted URL, the instances should be able to access any Amazon S3 bucket in the same region via any URL.

Which of the following solutions should you deploy? (Select two.)

AInclude s3.amazonaws.com in the whitelist.

BCreate a VPC endpoint for S3.

CRun Squid proxy on a NAT instance.

DDeploy a NAT gateway into your VPC.

EUtilize a security group to restrict access.

Show Suggested Answer

Suggested Answer: B, C

https://aws.amazon.com/blogs/security/how-to-set-up-an-outbound-vpc-proxy-with-domain-whitelisting-and-content-filtering/

by Lonny at May 05, 2022, 07:15 PM

Limited Time Offer

25%

Off

Get Premium ANS-C00 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!