A global company handles a large amount of personally identifiable information (Pll) through an internal web portal. The company's application runs in a corporate data center that is connected to AWS through an AWS Direct Connect connection. The application stores the Pll in Amazon S3.
According to a compliance requirement, traffic from the web portal to Amazon S3 must not travel across the internet. What should a SysOps administrator do to meet the compliance requirement?

Question

A global company handles a large amount of personally identifiable information (Pll) through an internal web portal. The company's application runs in a corporate data center that is connected to AWS through an AWS Direct Connect connection. The application stores the Pll in Amazon S3.

According to a compliance requirement, traffic from the web portal to Amazon S3 must not travel across the internet. What should a SysOps administrator do to meet the compliance requirement?

Sairam Emmidishetti · Accepted Answer

Provision an interface VPC endpoint for Amazon S3. Modify the application to use the interface endpoint.

Sairam Emmidishetti · Answer

Configure AWS Network Firewall to redirect traffic to the internal S3 address.

Sairam Emmidishetti · Answer

Modify the application to use the S3 path-style endpoint.

Sairam Emmidishetti · Answer

Set up a range of VPC network ACLs to redirect traffic to the Internal S3 address.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 150 - SOA-C02 discussion

Suggested answer: A

0 comments