LeetQuiz Logo
Privacy Policy•contact@leetquiz.com
© 2025 LeetQuiz All rights reserved.
AWS Certified Advanced Networking - Specialty

AWS Certified Advanced Networking - Specialty

Get started today

Ultimate access to all questions.


A company operates multiple production applications across various AWS accounts, all within the us-east-1 Region. These applications are accessible only to specific partner companies and are hosted on Amazon EC2 instances within an Auto Scaling group behind an Application Load Balancer (ALB). The EC2 instances reside in private subnets and are configured to accept traffic solely from the ALB. The ALB, located in a public subnet, permits inbound traffic exclusively from partner network IP address ranges over port 80.

Currently, when a new partner is added, the company must update the security group associated with the ALB in each account to include the partner's IP address range. A network engineer needs to implement a solution to centrally manage these partner network IP address ranges.

What is the MOST operationally efficient solution to meet these requirements?

Exam-Like



Explanation:

The most operationally efficient solution to centrally manage the partner network IP address ranges across multiple AWS accounts is to use a prefix list shared across accounts via AWS Resource Access Manager (AWS RAM). This approach allows for centralized management of IP address ranges, reducing the need to manually update security groups in each account. When a new partner is added, updating the prefix list automatically propagates the changes to all associated security groups across accounts. This method is more efficient than using DynamoDB or S3 with Lambda functions for updates, as it leverages AWS's native capabilities for resource sharing and management, minimizing operational overhead and potential for errors. Option C correctly implements this solution by creating a prefix list, sharing it across accounts using AWS RAM, and updating security groups to reference the prefix list. This ensures that any updates to the prefix list are automatically reflected in the security groups of all accounts, making it the most operationally efficient solution.

Powered ByGPT-5