A SysOps administrator is troubleshooting connectivity between an Amazon EC2 instance in Subnet A () within VPC A () and an Amazon RDS MySQL DB instance in Subnet B () within VPC B (). A VPC peering connection (`pcx-99998888`) has been established and is active. However, the EC2 instance cannot connect to the database. Which of the following configuration changes must be performed to allow traffic between the EC2 instance and the database? (Select TWO.)
- Add a route to the route table associated with Subnet B with a destination of and a target of `pcx-99998888`.Cevap
- Configure the security group of the RDS DB instance to allow inbound traffic on TCP port 3306 from the CIDR block .Cevap
- CAttach an Internet Gateway to VPC B and add a route in Subnet B's route table pointing to with the target set to the Internet Gateway.
- DConfigure the outbound rules of the stateless Network ACL for Subnet A to allow TCP port 3306 traffic to Subnet B, while leaving outbound ephemeral ports (-) disabled.
- ECreate a Gateway VPC Endpoint for Amazon RDS in VPC A, and select Subnet A's route table to automatically route the database traffic.
Cevap
To establish connectivity across the VPC peering connection, the administrator must add a route in Subnet B's route table pointing the destination CIDR to the peering connection key `pcx-99998888`, and configure the RDS DB instance's security group to allow inbound traffic on TCP port 3306 from the EC2 instance's subnet CIDR .
The correct options involve configuring the routing table for Subnet B to include a route targeting the EC2 subnet range via the peering connection, and modifying the RDS security group to allow inbound database connections from that range. Because VPC peering requires bidirectional routing config, adding the route in Subnet B completes the routing loop. Modifying the security group allows the connection to pass through the instance's stateful firewall.
Adım Adım Çözüm
Anahtar Kavram
VPC Peering Routing and Security Group Configuration