A Company Needs to Restrict Access to an Amazon S3

question 33

Multiple Choice

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps administrator take to meet these requirements?

• A) Create a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.
• B) Create a VPC endpoint for the S3 bucket, and create an S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.
• C) Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket.
• D) Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway.

---

Definitions:

Balance Sheet

A financial statement that summarizes a company's assets, liabilities, and shareholders' equity at a specific point in time, providing a snapshot of its financial condition.

Equipment Held

Assets in the form of machinery or other equipment that a company owns and uses in its operations.

Standby Purposes

Standby purposes involve situations where credit or resources are held in reserve to be utilized in specific circumstances or emergencies.

Actuarial Information

Data and analysis used to evaluate the financial implications of risk and uncertainty, often used in insurance and pensions.