Câu 124: AWS Certified Solutions Architect - Associate SAA-C03(New)

A company runs workloads on AWS. The company needs to connect to a service from an external provider. The service is hosted in the provider's VPC. According to the company’s security team, the connectivity must be private and must be restricted to the target service. The connection must be initiated only from the company’s VPC. Which solution will mast these requirements?

1. A. Create a VPC peering connection between the company's VPC and the provider's VPC. Update the route table to connect to the target service.
2. B. Ask the provider to create a virtual private gateway in its VPC. Use AWS PrivateLink to connect to the target service.
3. C. Create a NAT gateway in a public subnet of the company’s VPUpdate the route table to connect to the target service.
4. D. Ask the provider to create a VPC endpoint for the target service. Use AWS PrivateLink to connect to the target service. — đáp án hiện tại