Home / Amazon / SAA-C01 / Question 160

A Solutions Architect is designing a web application that will be hosted on Amazon EC2 instances in a public subnet. The web application uses a MySQL database in a private subnet. The database should be accessible to database administrators.Which of the following options should the Architect recommend? (Choose two.)

• A. Create a bastion host in a public subnet, and use the bastion host to connect to the database.

• B. Log in to the web servers in the public subnet to connect to the database.

• C. Perform DB maintenance after using SSH to connect to the NAT Gateway in a public subnet.

• D. Create an IPSec VPN tunnel between the customer site and the VPC, and use the VPN tunnel to connect to the database.

• E. Attach an Elastic IP address to the database.