Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It should be B, plus the DB security g A. group that allows all traffic from the security group of the application server in VPC A
Well this is a tricky one!!! Are we going to assume that the database in VPC B is in private subnet? In that case configuring security group to allow the traffic coming from Elastic IP of VPC A will not work. And if we use peering, the resources that live in the same subnet as the EC2 instance in VPC A will have access to the database? So what would we say to this? Is moving traffic through the public AWS space is safer than allowing access to the DB to other resources in VPC A?..... I don't know what to think
B. Configure a VPC peering connection between VPC A and VPC B. The most secure solution is to configure a VPC peering connection between the two VPCs. This allows private communication between the application server and the database, without exposing resources to the public internet. Option A exposes the database to the public internet by allowing inbound traffic from a public IP address. Option C makes the database instance itself public, which is insecure. Option D adds complexity with a proxy that is not needed when a VPC peering connection can enable private communication between VPCs. So option B is the most secure while allowing the necessary connectivity between the application server and the database in the separate VPCs.