SAA-C03 Domain 3: Design Secure Architectures

While troubleshooting latency, engineers determine they must private connectivity from VPC to AWS services without internet. Which action is appropriate? private connectivity from VPC to AWS services without internet.

Multiple choice — select one answer

Answer choices

  1. a. SSE-KMS on Amazon S3
  2. b. AWS IAM with MFA
  3. c. 0.0.0.0/0 on database port
  4. d. VPC interface endpoints (AWS PrivateLink)

Architectural breakdown & explanation

Interface endpoints keep traffic on the AWS network.

Correct answer(s): d. VPC interface endpoints (AWS PrivateLink)

Exam domain: Domain 3: Design Secure Architectures (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Solutions Architect – Associate bank. Run a full timed practice exam with domain-weighted random questions in your browser.