A company is performing a security review of its Amazon EMR API usage.

Vendor: Amazon Web Services
Product: SAA-C03
Update on: Dec 31, 2025
Questions: 670

Amazon Web Services SAA-C03 Question Answer

A company is performing a security review of its Amazon EMR API usage. The company's developers use an integrated development environment (IDE) that is hosted on Amazon EC2 instances. The IDE is configured to authenticate users to AWS by using access keys. Traffic between the company's EC2 instances and EMR cluster uses public IP addresses.

A solutions architect needs to improve the company's overall security posture. The solutions architect needs to reduce the company's use of long-term credentials and to limit the amount of communication that uses public IP addresses.

Which combination of steps will MOST improve the security of the company's architecture? (Select TWO.)

Set up a gateway endpoint to the EMR cluster.

Set up interface VPC endpoints to connect to the EMR cluster.

Set up a private NAT gateway to connect to the EMR cluster.

Set up IAM roles for the developers to use to connect to the Amazon EMR API.

Set up AWS Systems Manager Parameter Store to store access keys for each developer.