To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

Question

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

BlackTom AI · Accepted Answer

To understand how a resource in a private subnet can reach the public Internet, we need to look at how traffic exits a VPC. 
Option 1: Amazon CloudFront — CloudFront is a content delivery network used to cache and serve content from edge locations to end users; it is not used to enable private subnets to access the Internet directly, so this is not appropriate for egress connectivity. 
Option 2: VPN — A VPN connection provides private connectivity from your on‑premises network or remote sites to a VPC, not a mechanism for private subnets to reach the Internet inherently. It does not route general Internet-bound traffic from within a VPC by default. 
Option 3: Internet Gateway — An Internet Gateway allows resources with public IP addresses in a VPC to reach the Internet and for the Internet to reach those resources. However, private subnets typically do not have public IPs; without NAT, they cannot access the Internet. This is why alone it’s not sufficient for private-subnet Internet access. 
Option 4: Network access control list (NACL) — NACLs are stateless filters that control traffic to and from subnets, but they do not perform NAT or translate addresses; on their own, they do not enable Internet access for private subnets. 
Option 5: NAT gateway — A NAT gateway provides network address translation for instances in a private subnet, enabling them to initiate outbound connections to the Internet (and receive responses) while still preventing inbound connections from the Internet. This directly solves the requirement of enabling a private subnet resource to connect to the public Internet. 
In summary, among the listed components, the NAT gateway is the mechanism that enables outbound Internet access for resources in a private subnet, by translating private IPs to a public address while maintaining the private network’s isolation. The other options either serve different purposes or do not provide the required outbound translation functionality.

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?单项选择题

类似问题

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

What was the world's first widely adopted biodiversity policy?

The aim of the Paris Agreement is to ensure that the earth’s preindustrial temperature is not exceeded by more than º Celsius.

The IPCC's mission is to Blank ______.

Why have most international agreements for environmental protection been based on the honor system?

As was exhibited with the Montreal Protocol and the encouragement of reduced CFC production, trade can be an effective tool to compel compliance with international treaties.

The Stockholm Declaration and UNEP were the result of the Blank ______ first conference on the Human Environment in 1972.

In addition to the direct mission of the Convention on International Trade in Endangered Species (CITES), why was CITES so important?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单