SAA-C03 Q338 · Networking

Question

A company has a VPC with multiple private subnets that host multiple applications. The applications must not be accessible to the internet. However, the applications need to access multiple AWS services. The applications must not use public IP addresses to access the AWS services. Which solution will meet these requirements?

Accepted Answer

**Option A: Interface VPC Endpoints** satisfies every requirement:

1. **Applications in private subnets** — VPC endpoints are created within the VPC and associated with specific subnets. No changes to subnet type needed.

2. **No internet accessibility** — Interface VPC endpoints use **AWS PrivateLink** to create private connections to AWS services. Traffic never traverses the public internet. It stays entirely within the AWS network.

3. **No public IP addresses** — Interface VPC endpoints create **Elastic Network Interfaces (ENIs)** with private IP addresses in your subnets. Applications connect to AWS services using these private IPs (or the endpoint-specific DNS names that resolve to private IPs).

4. **Access multiple AWS services** — You can create interface VPC endpoints for a wide

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips