
Ultimate access to all questions.
A company has created a web service for language translation, hosted on a fleet of Amazon EC2 instances within an Auto Scaling group. These instances are deployed in a private subnet and are fronted by an Application Load Balancer (ALB). The web service handles requests with data sizes in the hundreds of megabytes.
The company must enable specific customers, each with their own AWS account, to access the web service. Access should be restricted to approved customers only, without exposing the service to all customers.
Which two-step combination will fulfill these requirements with the MINIMUM operational overhead? (Choose two.)
A
Create VPC peering connections with the approved customers only.
B
Create an AWS PrivateLink endpoint service. Configure the endpoint service to require acceptance that will be granted to approved customers only.
C
Configure an authentication action for the endpoint service's load balancer to allow customers to log in by using their AWS credentials. Provide only approved customers with the URL.
D
Configure a Network Load Balancer (NLB) and a listener with the ALB as a target. Associate the NLB with the endpoint service.
E
Associate the ALB with the endpoint service.