You have set up an S3 endpoint, and you want to restrict some instances from being able to access it. These instances are all in the same subnet, so you cannot simply remove the prefix list from the route table. What two approaches can you take to solve this? (Choose two.)

by totorovn at Feb. 19, 2025, 7:39 am

A. Remove any access to the PL in the security group attached to the instances.
B. Add A rule in the NACL to block the prefix list ID outbound.
C. This is not possible.
D. Modify the endpoint policy.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Join the Discussion

You must be logged in to post a comment.

You have set up an S3 endpoint, and you want to restrict some instances from being able to access it. These instances are all in the same subnet, so you cannot simply remove the prefix list from the route table. What two approaches can you take to solve this? (Choose two.)

Suggested Answer:

Share this post

Join the Discussion