Amazon Exam ANS-C01 Topic 2 Question 18 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 18
Topic #: 2

An organization is using a VPC endpoint for Amazon S3. When the security group rules for a set of instances were initially configured, access was restricted to allow traffic only to the IP addresses of the Amazon S3 API endpoints in the region from the published JSON file. The application was working properly, but now is logging a growing number of timeouts when connecting with Amazon S3. No internet gateway is configured for the VPC.

Which solution will fix the connectivity failures with the LEAST amount of effort?

ACreate a Lambda function to update the security group based on AmazonIPSpaceChanged notifications.

BUpdate the VPC routing to direct Amazon S3 prefix-list traffic to the VPC endpoint using the route table APIs.

CUpdate the application server's outbound security group to use the prefix-list for Amazon S3 in the same region.

DCreate an additional VPC endpoint for Amazon S3 in the same route table to scale the concurrent connections to Amazon.

Show Suggested Answer

Suggested Answer: B

by Herminia at Dec 23, 2023, 06:58 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tatum

24 days ago

I'd just tell the application to stop timing out. Problem solved! But in all seriousness, C looks like the way to go.

upvoted 0 times

Carol

4 days ago

I think C is the best option here.

upvoted 0 times

...

Billye

1 months ago

You know, this reminds me of that time I accidentally locked myself out of my own VPC. Good times. Anyway, I'm with the crowd on C - keep it simple, silly!

upvoted 0 times

Rikki

2 days ago

Yeah, updating the outbound security group sounds like the easiest solution.

upvoted 0 times

...

Kandis

19 days ago

I think C is the way to go. Keep it simple.

upvoted 0 times

...

Lorita

1 months ago

I'd be careful with that Lambda function idea. Seems like adding another moving part might just complicate things further. C looks like the way to go here.

upvoted 0 times

...

Teddy

1 months ago

Hmm, I see what they're getting at. Updating the routing table might be a bit overkill. I'm leaning towards C as well, seems the most straightforward solution.

upvoted 0 times

Helene

4 days ago

Agreed, it seems like the simplest solution.

upvoted 0 times

...

Royce

27 days ago

I think C is the best option here.

upvoted 0 times

...

Justine

2 months ago

I'm not sure, but creating a Lambda function to update the security group also sounds like a good solution.

upvoted 0 times

...

Rocco

2 months ago

I agree with Carri, that option seems like it would require the least amount of effort.

upvoted 0 times

...

Carri

2 months ago

I think the best solution is to update the VPC routing to direct Amazon S3 traffic to the VPC endpoint.

upvoted 0 times

...

Kimbery

2 months ago

Ah, the good old AWS VPC endpoint debacle. Classic networking challenge right here. I'm going with option C - updating the security group seems like the quickest fix to me.

upvoted 0 times