AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 159

Question

A global company handles a large amount of personally identifiable information (PII) through an internal web portal. The company’s application runs in a corporate data center that is connected to AWS through an AWS Direct Connect connection. The application stores the PII in Amazon S3. According to a compliance requirement, traffic from the web portal to Amazon S3 must not travel across the internet. What should a SysOps administrator do to meet the compliance requirement?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Provision an interface VPC endpoint for Amazon S3. Modify the application to use the interface endpoint. Amazon S3 provides durable, scalable object storage that is fully managed. A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 159