A company runs a web application on multiple Amazon EC2 instances in a VPC. The application must write sensitive data to an Amazon S3 bucket without sending data over the public internet. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Create a gateway VPC endpoint for Amazon S3. Create a route in the VPC route table to the endpoint..
Why this is the answer
A gateway VPC endpoint for Amazon S3 allows EC2 instances within a VPC to access S3 buckets directly, using private IP addresses. This ensures that traffic to S3 does not traverse the public internet, meeting the security requirement for sensitive data. A route table entry is necessary to direct S3-bound traffic through the endpoint. An internal Network Load Balancer cannot target an S3 bucket. S3 buckets are global resources, not deployed inside a VPC. AWS Direct Connect is for connecting on-premises networks to AWS, not for private access between resources within the same VPC to S3.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed