Q12 — AWS SAA-C03 Ch.6

Question 12 of 65 | ← Chapter 6

Q377. A company is moving its data and applications to AWS during a multiyear migration project The company wants to securely access data on Amazon S3 from the company's AWS Region and from the company's on- premises location. The data must not traverse the internet. The company has established an AWS Direct Connect connection between its Region and its on-premises location.Which solution will meet these requirements?

• A. Create gateway endpoints for Amazon S3. Use the gateway endpoints to securely access the data from the Region and the on-premises location
• B. Create a gateway in AWS Transit Gateway to access Amazon S3 securely from the Region and the on- premises location
• C. Create interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location ✓
• D. Use an AWS Key Management Service (AWS KMS) key to access the data securely from the Region and the on-premises location

Correct Answer: C. Create interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location

Explanation

The correct solution to meet the requirements of securely accessing data on Amazon S3 from both the AWS Region and the on-premises location without traversing the internet is:C. Create interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location.Interface endpoints for Amazon S3 allow you to securely access S3 buckets over a private connection using AWS PrivateLink. This ensures that the data does not traverse the public internet. By creating interface endpoints, you can access Amazon S3 directly from your AWS Region and on-premises location through the AWS Direct Connect connection, maintaining a secure and private connection throughout the migration project.