Home / Amazon / SAA-C01 / Question 320

An application runs in a VPC on Amazon EC2 instances behind an Application Load Balancer. Traffic to the Amazon EC2 instances must be limited to traffic from the Application Load Balancer.Based on these requirements, the security group configuration should only allow traffic from:

• the public IPs of the Application Load Balancer nodes.

• the IP range of the Application Load Balancer subnets.

• the security group attached to the Application Load Balancer.

• the VPC CIDR