A web application in a VPC runs on EC2 instances behind an ALB that uses AWS WAF. An external customer must connect to the application, and the company must supply IP addresses to all external customers. Which approach provides IP addresses with the least operational overhead?
Choose an answer
Tap an option to check your answer.
Correct answer: Create a Global Accelerator (standard accelerator), add the ALB as an endpoint, and give the accelerator's static IP addresses to the customer..
Why this is the answer
Global Accelerator provides static IP addresses that act as a fixed entry point to your application, even if the underlying ALB IP addresses change. This meets the requirement of supplying consistent IP addresses to customers with the least operational overhead. Replacing the ALB with an NLB would require reconfiguring WAF, as WAF integrates directly with ALBs, not NLBs. While an NLB can have an Elastic IP, this introduces more operational changes. Allocating an Elastic IP directly to an ALB is not possible; ALBs are managed services with dynamic IP addresses. CloudFront distributions use dynamic IP addresses that change, making it unsuitable for providing fixed IP addresses to customers.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed