Examkin

Soru

Zorluk: OrtaVPC Endpoints and PrivateLink Integration

A SysOps Administrator is deploying Amazon EC2 instances in a private subnet with no internet connectivity. The instances need to send messages to Amazon SQS. The administrator creates an Interface VPC Endpoint for SQS in the VPC. However, the EC2 instances are unable to resolve the standard SQS endpoint URL (sqs.us-east-1.amazonaws.com) to the private IP addresses of the VPC endpoint. What must the administrator do to resolve this DNS resolution issue?

  1. Enable Private DNS names for the Interface VPC Endpoint.Cevap
  2. B
    Add a route to the private subnet route table targeting the Amazon SQS Interface VPC Endpoint.
  3. C
    Update the security group of the Interface VPC Endpoint to allow inbound DNS queries on UDP port 53 from the EC2 instances.
  4. D
    Create an Internet Gateway and attach it to the VPC to allow DNS resolution requests to reach public AWS DNS servers.

Cevap

Enable Private DNS names for the Interface VPC Endpoint.
Enabling the Private DNS option for the VPC endpoint ensures that the VPC's internal DNS resolver maps the standard public service DNS name to the private IP addresses of the endpoint's network interfaces.

Adım Adım Çözüm

1
Identify that the instances are in a private subnet with no internet access and need to communicate with Amazon SQS privately.
Confirming that an Interface VPC Endpoint is the correct choice, but DNS resolution is failing to map the public endpoint URL to private IPs.
Establishing the requirement for local DNS resolution of the public SQS URL within the VPC.
2
Enable the Private DNS option on the Interface VPC Endpoint configuration.
AWS creates a private hosted zone managed by Route 53 that maps the public SQS DNS name to the private IPs of the endpoint's Elastic Network Interfaces (ENIs).
This allows applications to use the default SQS endpoint URL without code changes, while routing all traffic over the private network.

Anahtar Kavram

VPC Endpoints and PrivateLink Integration
Bu soruyu puanla

Konular

VPC Endpoints and PrivateLink Integration

Bu konudan daha fazla soru