Q88 — AWS AIF-C01 Ch.3

Question 88 of 100 | ← Chapter 3

A healthcare company must comply with regulatory policies mandating that data stored in Amazon S3 must not traverse the public internet when transferred to Amazon EC2 instances for ML model training. Which solution meets these requirements?

• A. Gateway endpoint ✓
• B. S3 Access Point
• C. VPC Flow Logs
• D. Transit Gateway

Correct Answer: A. Gateway endpoint

Explanation

To satisfy the healthcare company’s compliance requirement—that data stored in Amazon S3 remains within private network boundaries when transferred to Amazon EC2 instances for ML training—a secure, private connection between the VPC and Amazon S3 is required. A gateway endpoint establishes a direct, private, and encrypted pathway between a VPC and Amazon S3, ensuring all traffic bypasses the public internet and meets strict regulatory standards.