Study. uk . com
  1. Home
  2. All questions
  3. Question 36

AWS Certified Solutions Architect study material · question 36 of 500

A workload in a private subnet must call an AWS service without any traffic reaching an internet gateway. Which approach meets the requirement?

  1. Use AWS PrivateLink with a VPC endpoint for the service
  2. Add a NAT gateway in a public subnet
  3. Assign an Elastic IP address to the workload
  4. Peer the VPC with the service's VPC
Show the answer

Answer: A. Use AWS PrivateLink with a VPC endpoint for the service

PrivateLink reaches supported services through a VPC endpoint as though they sat inside the VPC, so no internet gateway is needed.

Source: Access AWS services through AWS PrivateLink (Amazon Web Services) — Access AWS services through AWS PrivateLink

Challenge yourself on this topic → Study as cards