Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A public VIF is specifically designed to reach AWS public services (like S3, which has public endpoints) over a private, dedicated circuit — without the traffic ever touching the public internet. A private VIF connects to resources inside a VPC (EC2, RDS, etc.) — it cannot directly reach S3 public endpoints. S3 Interface Endpoint (AWS PrivateLink) allows on-premises systems (connected via Direct Connect) to reach S3 buckets across multiple accounts using private IP addressing. An S3 gateway endpoint (Option D) is only usable from within a VPC and is not accessible from on-premises over Direct Connect.
Why not A and D: "Currently, gateway VPC endpoints for Amazon S3 do not support accessing resources in a different Region, in a different VPC, or from an on-premises data center (environment outside of AWS)."
A, C for sure. Interface endpoints extend the functionality of gateway endpoints by using private IP addresses to route requests to Amazon S3 from within your VPC, on premises, or from a VPC in another AWS Region by using VPC peering or AWS Transit Gateway.