AWS Certified Solutions Architect - Professional SAP-C02

By Amazon · Question Mode

QuestionQ9

Accelerate Workload Migration and Modernization

A company has developed APIs that use Amazon API Gateway Regional endpoints. The APIs invoke AWS Lambda functions and use API Gateway authentication mechanisms. Following a design review, a solutions architect identifies a group of APIs that do not need public access.

The solutions architect must design a solution that makes this group of APIs accessible only from a VPC. All APIs must be invoked by an authenticated user.

Which solution meets these requirements with the LEAST amount of effort?

Explanation

API Gateway private REST APIs can be called only from within a VPC by using an interface VPC endpoint. A resource policy can restrict invocation to the specified VPC or VPC endpoint, and the existing API Gateway authentication configuration continues to require authenticated callers. This changes the endpoint exposure without replacing the API Gateway-to-Lambda design.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!