Câu 133: AWS Certified Solutions Architect - Associate SAA-C02(Old)

An application is running on Amazon EC2 instances. Sensitive information required for the application is stored in an Amazon S3 bucket. The bucket needs to be protected from internet access while only allowing services within the VPC access to the bucket. Which combination of actions should solutions archived take to accomplish this? (Choose two.)

1. A. Create a VPC endpoint for Amazon S3. — đáp án hiện tại
2. B. Enable server access logging on the bucket.
3. C. Apply a bucket policy to restrict access to the S3 endpoint. — đáp án hiện tại
4. D. Add an S3 ACL to the bucket that has sensitive information.
5. E. Restrict users using the IAM policy to use the specific bucket.