A SysOps administrator has launched an Amazon EC2 instance in a new subnet to host a public web server. The instance has been assigned a public IPv4 address, and its associated security group is configured to allow outbound traffic to and inbound HTTP/HTTPS traffic on ports and . However, users cannot access the web server from the internet, and the instance is unable to communicate with any external resources. Which of the following troubleshooting steps should the administrator perform to resolve this connectivity issue? (Select TWO.)
- Verify that the subnet's route table contains a route for targeting the attached Internet Gateway.Cevap
- Verify that the Network ACL associated with the subnet has an outbound rule allowing traffic to and an inbound rule allowing return traffic on ephemeral ports ().Cevap
- CModify the instance's security group to allow inbound traffic from ephemeral ports () to accommodate the return path.
- DDeploy a NAT gateway in the subnet and add a route targeting the NAT gateway for in the subnet's route table.
- ECreate a Gateway VPC Endpoint for the Internet Gateway and associate it with the subnet's route table.
Cevap
Verify that the subnet's route table contains a route for targeting the attached Internet Gateway, and verify that the Network ACL associated with the subnet has an outbound rule allowing traffic to and an inbound rule allowing return traffic on ephemeral ports ().
To make a subnet public and allow bidirectional internet communication for an EC2 instance with a public IP, the subnet's route table must have a route for pointing to an Internet Gateway. Additionally, because Network ACLs are stateless, they must be explicitly configured to allow outbound traffic to and inbound return traffic on ephemeral ports () to complete the connection handshake.
Adım Adım Çözüm
Anahtar Kavram
VPC public routing and stateless network filtering troubleshooting
Tahmini Süre:2m 0s