A company hosts its application on several Amazon EC2 instances inside a VPC.

Question

A company hosts its application on several Amazon EC2 instances inside a VPC. The company creates a dedicated Amazon S3 bucket for each customer to store their relevant information in Amazon S3.
The company wants to ensure that the application running on EC2 instances can securely access only the S3 buckets that belong to the company's AWS account.
Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

A. Create a gateway endpoint for Amazon S3 that is attached to the VPC Update the IAM instance profile policy to provide access to only the specific buckets that the application needs.

Answer

B. Create a NAT gateway in a public subnet with a security group that allows access to only Amazon S3 Update the route tables to use the NAT Gateway.

Answer

C. Create a gateway endpoint for Amazon S3 that is attached to the VPC Update the IAM instance profile policy with a Deny action and the following condition key:

Answer

D. Create a NAT Gateway in a public subnet Update route tables to use the NAT Gateway Assign bucket policies for all buckets with a Deny action and the following condition key:

Big Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Exam SAA-C03 All Questions

Amazon Web Services AWS Solutions Architect Associate SAA-C03 Question # 106 Topic 14 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: