You have set up an S3 endpoint, and you want to restrict some instances from being able to access it. These instances are all in the same subnet, so you cannot simply remove the prefix list from the route table.
What two approaches can you take to solve this? (Choose two.)

Question

You have set up an S3 endpoint, and you want to restrict some instances from being able to access it. These instances are all in the same subnet, so you cannot simply remove the prefix list from the route table.

What two approaches can you take to solve this? (Choose two.)

Raja Tarazi · Accepted Answer

Remove any access to the PL in the security group attached to the instances.

Raja Tarazi · Accepted Answer

Modify the endpoint policy.

Raja Tarazi · Answer

Add A rule in the NACL to block the prefix list ID outbound.

Raja Tarazi · Answer

This is not possible.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 292 - ANS-C00 discussion

Suggested answer: A, D

0 comments