Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 366 discussion

A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data. The API must be accessible only from an application that is deployed in a VPC. The company deploys the API successfully. However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.

Which solution will provide connectivity between the EC2 instance and the API?

  • A. Create an interface VPC endpoint for API Gateway. Attach an endpoint policy that allows apigateway:* actions. Disable private DNS naming for the VPC endpoint. Configure an API resource policy that allows access from the VPC. Use the VPC endpoint's DNS name to access the API.
  • B. Create an interface VPC endpoint for API Gateway. Attach an endpoint policy that allows the execute-api:Invoke action. Enable private DNS naming for the VPC endpoint. Configure an API resource policy that allows access from the VPC endpoint. Use the API endpoint’s DNS names to access the API.
  • C. Create a Network Load Balancer (NLB) and a VPC link. Configure private integration between API Gateway and the NLB. Use the API endpoint’s DNS names to access the API.
  • D. Create an Application Load Balancer (ALB) and a VPC Link. Configure private integration between API Gateway and the ALB. Use the ALB endpoint’s DNS name to access the API.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
cypkir
Highly Voted 1 year ago
Selected Answer: B
Answer: B
upvoted 6 times
...
AzureDP900
Most Recent 1 week, 2 days ago
B is correct Creating an interface VPC endpoint for API Gateway allows the EC2 instance to access the API without having to traverse the internet. Attaching an endpoint policy that allows the execute-api:Invoke action enables the EC2 instance to invoke the API, but only if it has the necessary permissions and credentials. Enabling private DNS naming for the VPC endpoint ensures that the EC2 instance can use the endpoint's DNS name to access the API. Configuring an API resource policy that allows access from the VPC endpoint enables the EC2 instance to access the API without having to authenticate again.
upvoted 1 times
...
tushar321
7 months, 2 weeks ago
C. Why not C here ?
upvoted 2 times
...
career360guru
10 months, 3 weeks ago
Selected Answer: B
Option B
upvoted 1 times
...
ayadmawla
11 months, 3 weeks ago
Selected Answer: B
Answer B. Enable Private naming for VPC Endpoint
upvoted 3 times
...
shaaam80
11 months, 3 weeks ago
Selected Answer: B
Answer B. Enable Private naming for VPC Endpoint
upvoted 3 times
...
nublit
11 months, 3 weeks ago
Selected Answer: B
B is correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...