
Ultimate access to all questions.
A network engineer has set up an Amazon EC2 instance in a private subnet within a VPC that lacks a public subnet. The EC2 instance runs application code designed to send messages to an Amazon SQS queue. The subnet uses the default network ACL without any changes, and the EC2 instance is configured with the default security group without modifications.
The SQS queue is not receiving the messages.
What are two potential reasons for this issue? (Select two.)
A
The EC2 instance is not attached to an IAM role that allows write operations to Amazon SQS.
B
The security group is blocking traffic to the IP address range used by Amazon SQS
C
There is no interface VPC endpoint configured for Amazon SQS
D
The network ACL is blocking return traffic from Amazon SQS
E
There is no route configured in the subnet route table for the IP address range used by Amazon SQS