Amazon Exam SCS-C02 Topic 6 Question 29 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 29
Topic #: 6

A company has two AWS accounts: Account A and Account B Each account has a VPC. An application that runs in the VPC in Account A needs to write to an Amazon S3 bucket in Account B. The application in Account A already has permission to write to the S3 bucket in Account B.

The application and the S3 bucket are in the same AWS Region. The company cannot send network traffic over the public internet.

Which solution will meet these requirements? b

AIn both accounts, create a transit gateway and VPC attachments in a subnet in each Availability Zone. Update the VPC route tables.

BDeploy a software VPN appliance in Account A. Create a VPN connection between the software VPN appliance and a virtual private gateway in Account B

CCreate a VPC peering connection between the VPC in Account A and the VPC in Account B. Update the VPC route tables, network ACLs, and security groups to allow network traffic between the peered IP ranges.

DIn Account A. create a gateway VPC endpoint for Amazon S3. Update the VPC route table in Account A.

Show Suggested Answer

Suggested Answer: A, C, D

by julien at Sep 16, 2024, 09:43 AM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ulysses

1 months ago

D is the way to go. I don't want to deal with setting up a software VPN appliance or any of that other complicated stuff. Keep it simple!

upvoted 0 times

Isadora

7 days ago

Yeah, let's keep it simple and go with option D.

upvoted 0 times

...

Glynda

12 days ago

I agree, setting up a gateway VPC endpoint for Amazon S3 in Account A is the simplest solution.

upvoted 0 times

...

Alyce

13 days ago

D is definitely the easiest option. No need to overcomplicate things.

upvoted 0 times

...

Rosita

1 months ago

Haha, I'm definitely not choosing A. Setting up a transit gateway and VPC attachments sounds like way too much work for this use case!

upvoted 0 times

...

Hannah

1 months ago

I'm leaning towards C. A VPC peering connection between the two accounts might be a bit more complex, but it seems like a robust solution that doesn't require any additional components.

upvoted 0 times

Novella

5 days ago

That's true, but with VPC peering, we don't have to worry about additional components like VPN appliances.

upvoted 0 times

...

Javier

14 days ago

But wouldn't setting up a transit gateway be easier to manage in the long run?

upvoted 0 times

...

Dominque

1 months ago

I think C is the best option too. It's a direct connection between the VPCs.

upvoted 0 times

...

Veta

2 months ago

I think the correct answer is D. Creating a gateway VPC endpoint for Amazon S3 in Account A seems like the most straightforward solution that meets the requirements.

upvoted 0 times

Christiane

2 days ago

That makes sense. It would allow the application in Account A to write to the S3 bucket in Account B without sending network traffic over the public internet.

upvoted 0 times

...

Mary

11 days ago

I think the correct answer is D. Creating a gateway VPC endpoint for Amazon S3 in Account A seems like the most straightforward solution that meets the requirements.

upvoted 0 times

...