AWS VPC Access Control
Question
Your company has just set up a new document server on it's AWS VPC, and it has four very important clients that it wants to give access to.
These clients also have VPCs on AWS and it is through these VPCs that they will be given accessibility to the document server.
In addition, each of the clients should not have access to any of the other clients' VPCs.
Choose the correct answer from the options below.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D. E.Answer - A.
A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses.
Instances in either VPC can communicate with each other as if they are within the same network.
You can create a VPC peering connection between your own VPCs, or with a VPC in another AWS account within a single region.
For more information on VPC Peering please see the below link:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-peering.htmlThe correct answer for this scenario is option B, which is to set up VPC peering between your company's VPC and each of the clients' VPCs, but block the IPs from CIDR of the clients' VPCs to deny them access to each other.
Explanation:
VPC peering is a connection between two VPCs that enables traffic to flow between them securely. When you set up a VPC peering connection, you can choose to allow traffic between the peered VPCs or restrict traffic flow based on specific rules.
In this scenario, your company wants to give access to four important clients to a document server on your company's AWS VPC. The clients also have their own VPCs on AWS, and the access to the document server will be granted through these VPCs. Additionally, each of the clients should not have access to any of the other clients' VPCs.
Option A suggests setting up VPC peering between your company's VPC and each of the clients' VPCs, but it does not address the requirement that clients should not have access to each other's VPCs. Therefore, this option is not suitable for this scenario.
Option B suggests setting up VPC peering between your company's VPC and each of the clients' VPCs, but also blocking the IPs from the CIDR of the clients' VPCs to deny them access to each other. This option addresses the requirement that each client should not have access to any of the other clients' VPCs, which makes it the correct answer.
Option C suggests setting up VPC peering between your company's VPC and each of the clients' VPCs, but it does not specify any additional measures to restrict access between the clients' VPCs. Therefore, this option is not suitable for this scenario.
Option D suggests setting up VPC peering between each of the clients' VPCs to speed up access time, but this option is not necessary as the clients' VPCs will only be used to access the document server on your company's VPC.
Option E suggests setting up all the VPCs with the same CIDR but have your company's VPC as a centralized VPC. This option is not suitable for this scenario as it would result in IP conflicts and make it impossible for the clients to access the document server on your company's VPC.
