Home / Amazon / SAA-C01 / Question 100

A Solutions Architect needs to allow developers to have SSH connectivity to web servers. The requirements are as follows:

Limit access to users origination from the corporate network.

Web servers cannot have SSH access directly from the Internet.

Web servers reside in a private subnet.Which combination of steps must the Architect complete to meet these requirements? (Choose two.)

• Create a bastion host that authenticates users against the corporate directory.

• Create a bastion host with security group rules that only allow traffic from the corporate network.

• Attach an IAM role to the bastion host with relevant permissions.

• Configure the web servers' security group to allow SSH traffic from a bastion host.

• Deny all SSH traffic from the corporate network in the inbound network ACL.