A SysOps Administrator is configuring a Gateway Endpoint for Amazon S3 to allow Amazon EC2 instances in a private subnet to access S3 buckets. Which configuration steps must the administrator complete to ensure that the EC2 instances can communicate with Amazon S3 through the endpoint? (Select TWO.)
- Select the Route Table associated with the private subnet when creating the Gateway Endpoint to automatically add the route targeting the endpoint.Answer
- Ensure the Security Group associated with the EC2 instances allows outbound HTTPS traffic to the Amazon S3 prefix list.Answer
- CManually add a Route Table entry targeting the Elastic Network Interface of the Gateway Endpoint.
- DAssociate a Security Group with the Gateway Endpoint and configure an inbound rule allowing HTTPS traffic from the EC2 instances.
Answer
Selecting the Route Table associated with the private subnet during endpoint creation, and ensuring the Security Group associated with the EC2 instances allows outbound HTTPS traffic to the Amazon S3 prefix list.
Establishing connectivity to Amazon S3 via a Gateway Endpoint requires associating the Endpoint with the private subnet's Route Table. This automatically inserts a route directing traffic for the S3 prefix list to the Gateway Endpoint. Additionally, the EC2 instance's Security Group must allow outbound HTTPS traffic to the S3 prefix list to permit the egress connection.
Step-by-Step Solution
Key Concept
Gateway Endpoints use Route Table prefix lists to direct traffic to AWS services and do not support Security Groups, unlike Interface Endpoints which use Elastic Network Interfaces and Security Groups.