A company is migrating data and applications to AWS. The company needs secure access to data in Amazon S3 from the AWS Region and from the on-premises location without the data traversing the internet. The company already has an AWS Direct Connect connection between the Region and on-premises. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Create interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location..
Why this is the answer
Interface endpoints for Amazon S3, powered by AWS PrivateLink, provide private connectivity from your VPC to S3 without traversing the public internet. This allows both resources within the AWS Region (e.g., EC2 instances in your VPC) and on-premises resources connected via Direct Connect to access S3 securely and privately. Gateway endpoints for S3 are a legacy solution that only allow access from within the VPC and do not support access over Direct Connect. AWS Transit Gateway is a network transit hub but does not directly provide private access to S3; it would still require an endpoint. AWS KMS is for encryption key management, not for establishing network connectivity to S3.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed