AWS Certified Cloud Practitioner CLF-C02Demo

By Amazon · Question Mode

QuestionQ108

Content Domain 3: Cloud Technology and Services

A company wants to securely access an Amazon S3 bucket from an Amazon EC2 instance without accessing the internet.

What should the company use to accomplish this goal?

  • A VPN connection
  • B Internet gateway
  • C VPC endpoint
  • D NAT gateway
Explanation

A VPC endpoint (specifically a gateway endpoint for S3) allows resources inside a VPC to privately access Amazon S3 over the AWS network backbone without traversing the public internet. A VPN connection, internet gateway, and NAT gateway all route traffic through, or require, internet connectivity, which the requirement explicitly rules out.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!