AWS Certified Advanced Networking - Specialty ANS-C01Demo

By Amazon · Question Mode

QuestionQ12

Network Implementation

A company is rolling out AWS Cloud WAN with edge locations in the us-east-1 Region and the ap-southeast-2 Region. Separate AWS Cloud WAN segments are configured for the development environment, production environment, and shared services environment at each edge location. Many new VPCs will be deployed for these environments and configured as attachments to the AWS Cloud WAN core network.

The company’s network team needs to ensure that VPC attachments are configured for the appropriate segment. The team will tag VPC attachments with the Environment key and a value that matches the applicable environment segment name. The production environment segment in us-east-1 must require acceptance for attachment requests. All other attachment requests must not require acceptance.

Which solution meets these requirements?

  • A Create a rule with a number of 100 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "or" value. Include conditions that require a tag:Environment value of Production or a Region value of us-east-1. Create a rule with a number of 200 that does not require acceptance to map any tag:Environment values to their respective segments.
  • B Create a rule with a number of 100 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "and" value. Include conditions that require a tag:Environment value of Production and a Region value of us-east-1. Create a rule with a number of 200 that does not require acceptance to map any tag.Environment values to their respective segments.
  • C Create a rule with a number of 100 that does not require acceptance to map any tag:Environment values to their respective segments. Create a rule with a number of 200 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "and" value. Include conditions that require a tag:Environment value of Production and a Region value of us-east-1.
  • D Create a rule with a number of 100 that does not require acceptance to map any tag:Environment values to their respective segments. Create a rule with a number of 200 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "or" value. Include conditions that require a tag:Environment value of Production or a Region value of us-east-1.
Explanation

AWS Cloud WAN processes attachment-policy rules in ascending rule-number order and stops when a rule matches. A lower-numbered rule using and logic for Environment=Production and us-east-1 restricts required acceptance to precisely the production attachments in that Region. A later general rule can map Environment tag values to their matching segments without acceptance. Using or would match either condition and apply acceptance too broadly.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!