Q951. A company is developing an application in the AWS Cloud.The application's HTTP API contains critical inf

Question

Q951. A company is developing an application in the AWS Cloud.The application's HTTP API contains critical information that is published in Amazon API Gateway.The critical information must be accessible from only a limited set of trusted lP addresses that belong to the company's internal network.Which solution will meet these requirements?

Accepted Answer

B. Create a resource policy for the APl that denies access to any IP address that is not specifically allowed.

Answer

A. Set up an APl Gateway private integration to restrict access to a predefined set of IP addresses

Answer

C. Directly deploy the APl in a private subnet. Create a network ACL. Set up rules to allow the traffic from specific IP addresses.

Answer

D. Modify the security group that is attached to APl Gateway to allow inbound traffic from only the trusted IP addresses

Q51 — AWS SAA-C03 Ch.13

Correct Answer: B. Create a resource policy for the APl that denies access to any IP address that is not specifically allowed.

Explanation