
Ultimate access to all questions.
A team of data scientists is utilizing Amazon SageMaker instances and SageMaker APIs within a VPC that is completely isolated from the internet to train their machine learning models. The datasets required for training these models are stored in an Amazon S3 bucket, which is accessible through interface VPC endpoints. Occasionally, the data scientists need to update their Python packages using the Python Package Index (PyPI) repository. A solutions architect is tasked with ensuring access to PyPI while maintaining the isolation of the SageMaker instances from the internet. What solution should the architect implement to fulfill these requirements?
A
Create an AWS CodeCommit repository for each required package, synchronize it with the PyPI repository, and establish a VPC endpoint for CodeCommit.
B
Set up a NAT gateway within the VPC, configure VPC routes to permit internet access solely through a network ACL that restricts access to the PyPI repository endpoint.
C
Deploy a NAT instance in the VPC, configure VPC routes for internet access, and set up SageMaker notebook instance firewall rules to allow access exclusively to the PyPI repository endpoint.
D
Establish an AWS CodeArtifact domain and repository, connect it to the public:pypi repository, configure the Python client to utilize the CodeArtifact repository, and create a VPC endpoint for CodeArtifact.