AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 54

Question

A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented a strict IP allow list that requires all build uploads to come from a single IP address. What change should the systems administrator make to the existing build fleet to comply with this new requirement?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. A NAT gateway lets private subnet resources reach the internet for outbound traffic only.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 54