A security engineer creates an Amazon S3 bucket policy that denies access to all users. A few days later, the security engineer adds an additional statement to the bucket policy to allow read-only access to one other employee. Even after updating the policy, the employee still receives an access denied message.
What is the likely cause of this access denial?
A security engineer is working with a company to design an ecommerce application. The application will run on Amazon EC2 instances that run in an Auto Scaling group behind an Application Load Balancer (ALB). The application will use an Amazon RDS DB instance for its database.
The only required connectivity from the internet is for HTTP and HTTPS traffic to the application. Theapplication must communicate with an external payment provider that allows traffic only from apreconfigured allow list of IP addresses. The company must ensure that communications with theexternal payment provider are not interrupted as the environment scales. Which combination of actions should the security engineer recommend to meet these requirements? (Select THREE.)

Question

A security engineer creates an Amazon S3 bucket policy that denies access to all users. A few days later, the security engineer adds an additional statement to the bucket policy to allow read-only access to one other employee. Even after updating the policy, the employee still receives an access denied message.

What is the likely cause of this access denial?

A security engineer is working with a company to design an ecommerce application. The application will run on Amazon EC2 instances that run in an Auto Scaling group behind an Application Load Balancer (ALB). The application will use an Amazon RDS DB instance for its database.

The only required connectivity from the internet is for HTTP and HTTPS traffic to the application. Theapplication must communicate with an external payment provider that allows traffic only from apreconfigured allow list of IP addresses. The company must ensure that communications with theexternal payment provider are not interrupted as the environment scales. Which combination of actions should the security engineer recommend to meet these requirements? (Select THREE.)

Fahad Mustafa · Accepted Answer

Deploy a NAT gateway in each private subnet for every Availability Zone that is in use.

Fahad Mustafa · Accepted Answer

Place the DB instance in a private subnet.

Fahad Mustafa · Accepted Answer

Configure the Auto Scaling group to place the EC2 instances in a private subnet.

Fahad Mustafa · Answer

Place the DB instance in a public subnet.

Fahad Mustafa · Answer

Configure the Auto Scaling group to place the EC2 instances in a public subnet.

Fahad Mustafa · Answer

Deploy the ALB in a private subnet.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 521 - SCS-C01 discussion

Suggested answer: A, C, E

0 comments