Security, Compliance, and Governance for AI Solutions II

Question 61

A health care company has set up a data analytics application within a Virtual Private Cloud (VPC) to process confidential patient records. The VPC is configured to comply with strict regulatory requirements, including no internet access. The application needs to fetch and process medical images stored in Amazon S3 on a regular basis. The company is searching for a secure and reliable solution to enable this data transfer without exposing traffic to the public internet.

What do you recommend?

A. Use a NAT Gateway to enable internet access for the application in the VPC.

B. Use a VPC Endpoint to establish a private connection between the VPC and Amazon S3.

C. Set up a VPN connection between the VPC and Amazon S3.

D. Enable public access to the S3 bucket while restricting permissions to specific IPs.