AWS Certified Data Engineer - Associate
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
Your company is implementing a new application that requires access to an Amazon S3 bucket through an AWS PrivateLink. You need to ensure that the application can securely access the S3 bucket without exposing it to the public internet. Which of the following steps should you take to achieve this?
Explanation:
To securely access an Amazon S3 bucket through an AWS PrivateLink, you should create a VPC endpoint for Amazon S3 and configure the VPC security group to allow access from the application's subnet. This approach ensures that the S3 bucket is not exposed to the public internet and can only be accessed from within the specified VPC. Option A involves using an S3 Access Point, which is not directly related to PrivateLink. Option C and D involve using an Internet Gateway or NAT Gateway, which do not provide the required isolation for PrivateLink access.