A company is using a NAT gateway to allow internet connectivity for private subnets in a VPC in the us-west-2 Region. After a security audit, the company needs to remove the NAT gateway. In the private subnets, the company has resources that use the unified Amazon CloudWatch agent. A network engineer must create a solution to ensure that the unified CloudWatch agent continues to work after the removal of the NAT gateway. Which combination of steps should the network engineer take to meet these requirements? (Choose three.)
Select 3 answers.
Marked answer: A
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose ADF2
A - Private DNS must be enabled for this to work in private subnets D - The unified CloudWatch agent needs to communicate with both CloudWatch Logs and CloudWatch Metrics (Monitoring). These two interface endpoints are required F -This ensures that traffic from the private subnets can reach the interface endpoints, enabling communication with CloudWatch services
Chose ACD1
A, C and D
1
A,B and D. Option C is not needed because we're not concerned with inbound traffic for this scenario.
