AWS Certified Advanced Networking - Specialty ANS-C01

By Amazon · Question Mode

QuestionQ12

Network Implementation

A company is rolling out AWS Cloud WAN with edge locations in the us-east-1 Region and the ap-southeast-2 Region. Separate AWS Cloud WAN segments are configured for the development environment, production environment, and shared services environment at each edge location. Many new VPCs will be deployed for these environments and configured as attachments to the AWS Cloud WAN core network.

The company’s network team needs to ensure that VPC attachments are configured for the appropriate segment. The team will tag VPC attachments with the Environment key and a value that matches the applicable environment segment name. The production environment segment in us-east-1 must require acceptance for attachment requests. All other attachment requests must not require acceptance.

Which solution meets these requirements?

Explanation

AWS Cloud WAN processes attachment-policy rules in ascending rule-number order and stops when a rule matches. A lower-numbered rule using and logic for Environment=Production and us-east-1 restricts required acceptance to precisely the production attachments in that Region. A later general rule can map Environment tag values to their matching segments without acceptance. Using or would match either condition and apply acceptance too broadly.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!