Question:A company mandates that all internal AWS communications useprivate IPs.

Vendor: Amazon Web Services
Product: SAP-C02
Update on: Apr 6, 2026
Questions: 625

Amazon Web Services SAP-C02 Question Answer

Question:

A company mandates that all internal AWS communications useprivate IPs. A solutions architect createdinterface VPC endpointsfor public AWS services like S3. However, service names are still resolving topublic IP addresses, and the internal apps cannot connect.

What should the architect do to resolve this issue?

Update the subnet route table with a route to the interface endpoint.

Enable the private DNS option on the VPC attributes.

Configure the security group on the interface endpoint to allow access.

Configure a private hosted zone with conditional forwarding.