A company hosts an internal inventory management service on Amazon EC2 instances within an Auto Scaling group (ASG). The service runs behind an internal Application Load Balancer (ALB) and is configured to listen on custom TCP port 5000. The solutions architect must ensure that the ALB can successfully monitor the health of the application on the instances and route traffic to them securely.
Which combination of actions should the solutions architect take to meet these requirements? (Select two.)
- Configure the target group to perform health checks on the traffic port or explicitly on port 5000.Cevap
- Configure the security group attached to the EC2 instances to allow inbound TCP traffic on port 5000 from the security group of the ALB.Cevap
- CConfigure the target group health check to query the default HTTP port 80 to separate health check traffic from client traffic.
- DConfigure stateless Network Access Control Lists (NACLs) at the subnet level to permit inbound traffic on port 5000, relying on NACL statefulness for return traffic.
- EConfigure an Amazon Route 53 latency routing policy pointing to the load balancer to automatically route users away from unhealthy targets without setting up active health checks.
Cevap
The solutions architect should configure the target group to perform health checks on port 5000 and configure the security group of the EC2 instances to allow inbound traffic on port 5000 from the security group of the Application Load Balancer.
To ensure that the Application Load Balancer can route traffic to and verify the health of the custom service, the target group health checks must query the port where the application is running, which is port 5000. Additionally, the security group of the EC2 instances must permit inbound traffic on port 5000 specifically from the security group of the load balancer to secure the network path and allow traffic flow.
Adım Adım Çözüm
Anahtar Kavram
Auto Scaling and Application Load Balancer custom port routing and health check configuration