During development, an AI application fails to initialize because it cannot connect to the Amazon Bedrock API. The application runs inside a private VPC. What must be configured?
Trap 1: A NAT Gateway with an EIP.
While this enables access, it's not the most secure or recommended approach compared to Interface Endpoints.
Trap 2: A
A
Trap 3: An Internet Gateway attached to the VPC.
Internet Gateways provide public access, which may violate security compliance.
- A
An Interface VPC Endpoint for Amazon Bedrock.
This is the secure and standard way to access AWS services from within a private VPC.
- B
A NAT Gateway with an EIP.
Why wrong: While this enables access, it's not the most secure or recommended approach compared to Interface Endpoints.
- C
A
Why wrong: A
- D
An Internet Gateway attached to the VPC.
Why wrong: Internet Gateways provide public access, which may violate security compliance.
- E
A public subnet in the VPC configuration.
Why wrong: VPC endpoints do not require public subnets.