Q40 — AWS SAA-C03 Ch.12

Question 40 of 100 | ← Chapter 12

Q840. A company wants to set up Amazon Managed Grafana as its visualization tool. The company wants to visualize data from its Amazon RDS database as one data source. The company needs a secure solution that will not expose the data over the internet.Which solution will meet these requirements?

Correct Answer: C. Create an Amazon Managed Grafana workspace without a VPCreate an AWS PrivateLink endpoint to establish a connection between Amazon Managed Grafana and Amazon RDS. Set up Amazon RDS as a data source in Amazon Managed Grafana.

Explanation

To meet the requirement of setting up Amazon Managed Grafana as a visualization tool while securely visualizing data from an Amazon RDS database without exposing it over the internet, the recommended solution is:C. Create an Amazon Managed Grafana workspace without a VPC. Create an AWS PrivateLink endpoint to establish a connection between Amazon Managed Grafana and Amazon RDS. Set up Amazon RDS as a data source in Amazon Managed Grafana.Here's why:Option C suggests creating an Amazon Managed Grafana workspace without a VPC, which simplifies the setup. To securely connect Amazon Managed Grafana with Amazon RDS, an AWS PrivateLink endpoint is created. AWS PrivateLink enables private connectivity between services within the same region.By establishing an AWS PrivateLink endpoint, the connection between Amazon Managed Grafana and Amazon RDS remains within the AWS network, ensuring data does not traverse the public internet. This solution provides a secure and private connection for visualizing data from the RDS database without exposing it externally.Option A suggests creating an Amazon Managed Grafana workspace without a VPC and configuring a public endpoint for the RDS database. However, exposing the RDS database through a public endpoint may introduce security risks by allowing access over the internet, which contradicts the requirement of not exposing the data externally.Option B suggests creating an Amazon Managed Grafana workspace in a VPC and configuring a private endpoint for the RDS database. This option provides better security by keeping the RDS database within a private network. However, it does not address the requirement of not exposing the data over the internet.Option D suggests creating an Amazon Managed Grafana workspace in a VPC and configuring a public endpoint for the RDS database. This option exposes the RDS database publicly, which is not in line with the requirement of not exposing the data over the internet.Therefore, the recommended solution is to create an Amazon Managed Grafana workspace without a VPC, establish an AWS PrivateLink endpoint for secure connectivity between Amazon Managed Grafana and Amazon RDS, and set up Amazon RDS as a data source in Amazon Managed Grafana. This solution ensures a secure and private connection for visualizing data from the RDS database without exposing it over the internet.