Home / Amazon / SAA-C01 / Question 199

A credit card processing application, hosted on an on-premises server, needs to communicate directly with a database hosted on an Amazon EC2 instance running in a private subnet of a VPC. Compliance requirements state that end-to-end communication should be encrypted.Which solution will ensure that this requirement is met?

• Use HTTPS for traffic over VPC peering between the VPC and the on-premises datacenter.

• Use HTTPS for traffic over the Internet between the on-premises server and the Amazon EC2 instance.

• Use HTTPS for traffic over a VPN connection between the VPC and the on-premises datacenter.

• Use HTTPS for traffic over gateway VPC endpoints that have been configured for the Amazon EC2 instance.