Amazon SCS-C02 Exam - Topic 6 Question 29 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 29
Topic #: 6

A company has two AWS accounts: Account A and Account B Each account has a VPC. An application that runs in the VPC in Account A needs to write to an Amazon S3 bucket in Account B. The application in Account A already has permission to write to the S3 bucket in Account B.

The application and the S3 bucket are in the same AWS Region. The company cannot send network traffic over the public internet.

Which solution will meet these requirements? b

AIn both accounts, create a transit gateway and VPC attachments in a subnet in each Availability Zone. Update the VPC route tables.

BDeploy a software VPN appliance in Account A. Create a VPN connection between the software VPN appliance and a virtual private gateway in Account B

CCreate a VPC peering connection between the VPC in Account A and the VPC in Account B. Update the VPC route tables, network ACLs, and security groups to allow network traffic between the peered IP ranges.

DIn Account A. create a gateway VPC endpoint for Amazon S3. Update the VPC route table in Account A.

Show Suggested Answer

Suggested Answer: A, C, D

by julien at Sep 16, 2024, 09:43 AM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Theodora

3 months ago

Transit gateways are overkill for this, I think.

upvoted 0 times

...

Carma

3 months ago

D is a good option too, but it might not cover all cases.

upvoted 0 times

...

Arminda

3 months ago

Wait, can you really use VPC peering for cross-account access?

upvoted 0 times

...

Avery

4 months ago

I agree, C is straightforward and keeps it private.

upvoted 0 times

...

Bobbye

4 months ago

Option C seems like the best choice for VPC peering.

upvoted 0 times

...

Latrice

4 months ago

I vaguely remember that VPNs can connect different accounts, but I thought they were more complex than just a simple connection.

upvoted 0 times

...

Argelia

4 months ago

I feel like creating a transit gateway is overkill for this scenario, but I might be mixing it up with another question about connecting multiple VPCs.

upvoted 0 times

...

Ernestine

4 months ago

I think option D sounds familiar; I practiced a question about VPC endpoints for S3, but I can't recall if it applies here since it's cross-account.

upvoted 0 times

...

Denny

5 months ago

I remember studying VPC peering connections, but I'm not sure if they can be used across accounts.

upvoted 0 times

...

Lauran

5 months ago

I'm leaning towards the VPN appliance solution. That seems like it would give us the secure connection we need between the two accounts. I'll make sure to set up the VPN connection correctly.

upvoted 0 times

...

Shonda

5 months ago

The gateway VPC endpoint for S3 could work, but I'm not sure if that fully addresses the need to connect the two VPCs. I'll have to double-check the details on that one.

upvoted 0 times

...

Linn

5 months ago

Okay, I think I've got it. The VPC peering connection seems like the best way to connect the two VPCs without going over the public internet. I'll make sure to update the route tables and security groups properly.

upvoted 0 times

...

Stephen

5 months ago

This looks like a tricky one. I'll need to think through the requirements carefully to make sure I choose the right solution.

upvoted 0 times

...

Moon

5 months ago

Hmm, I'm a bit confused about the transit gateway option. Does that really meet the requirement of not sending traffic over the public internet?

upvoted 0 times

...

Kristin

5 months ago

Wait, I'm a bit confused. Do I need to select the server first, or can I just go straight to the log events? I want to make sure I don't miss anything.

upvoted 0 times

...

Ulysses

10 months ago

D is the way to go. I don't want to deal with setting up a software VPN appliance or any of that other complicated stuff. Keep it simple!

upvoted 0 times

Isadora

9 months ago

Yeah, let's keep it simple and go with option D.

upvoted 0 times

...

Glynda

9 months ago

I agree, setting up a gateway VPC endpoint for Amazon S3 in Account A is the simplest solution.

upvoted 0 times

...

Alyce

9 months ago

D is definitely the easiest option. No need to overcomplicate things.

upvoted 0 times

...

Rosita

10 months ago

Haha, I'm definitely not choosing A. Setting up a transit gateway and VPC attachments sounds like way too much work for this use case!

upvoted 0 times

...

Hannah

10 months ago

I'm leaning towards C. A VPC peering connection between the two accounts might be a bit more complex, but it seems like a robust solution that doesn't require any additional components.

upvoted 0 times

Novella

8 months ago

That's true, but with VPC peering, we don't have to worry about additional components like VPN appliances.

upvoted 0 times

...

Javier

9 months ago

But wouldn't setting up a transit gateway be easier to manage in the long run?

upvoted 0 times

...

Dominque

9 months ago

I think C is the best option too. It's a direct connection between the VPCs.

upvoted 0 times

...

Veta

10 months ago

I think the correct answer is D. Creating a gateway VPC endpoint for Amazon S3 in Account A seems like the most straightforward solution that meets the requirements.

upvoted 0 times

Hassie

8 months ago

I agree. It's important to choose the solution that meets the requirements while also considering security and performance.

upvoted 0 times

...

Kate

8 months ago

Exactly. It's a secure and efficient way to enable communication between the two accounts.

upvoted 0 times

...

Christiane

8 months ago

That makes sense. It would allow the application in Account A to write to the S3 bucket in Account B without sending network traffic over the public internet.

upvoted 0 times

...

Mary

9 months ago

I think the correct answer is D. Creating a gateway VPC endpoint for Amazon S3 in Account A seems like the most straightforward solution that meets the requirements.

upvoted 0 times

...