AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 142

Question

A company has developed APIs that use Amazon API Gateway with Regional endpoints. The APIs call AWS Lambda functions that use API Gateway authentication mechanisms. After a design review, a solutions architect identifies a set of APIs that do not require public access. The solutions architect must design a solution to make the set of APIs accessible only from a VPC. All APIs need to be called with an authenticated user Which solution will meet these requirements with the LEAST amount of effort?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Update the API endpoint from Regional to private in API Gateway. Create an interface VPC endpoint in the VPCreate a resource policy, and attach it to the API. Use the VPC endpoint to call the API from the VPC. A VPC endpoint provides private connectivity to AWS services without traversing the public internet. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 142