Examice

Exam ANS-C01 All QuestionsBrowse all questions from this exam

Question 132

A company is running a hybrid cloud environment. The company has multiple AWS accounts as part of an organization in AWS Organizations. The company needs a solution to manage a list of IPv4 on-premises hosts that will be allowed to access resources in AWS. The solution must provide version control for the list of IPv4 addresses and must make the list available to the AWS accounts in the organization.

Which solution will meet these requirements?

Create a customer-managed prefix list. Add entries for the initial list of on-premises IPv4 hosts. Create a resource share in AWS Resource Access Manager. Add the managed prefix list to the resource share. Share the resource with the organization.

Create a customer-managed prefix list. Add entries for the initial list of on-premises IPv4 hosts. Use AWS Firewall Manager to share the managed prefix list with the organization.

Create a security group. Add inbound rule entries for the initial list of on-premises IPv4 hosts. Create a resource share in AWS Resource Access Manager. Add the security group to the resource share. Share the resource with the organization.

Create an Amazon DynamoDB table. Add entries for the initial list of on-premises IPv4 hosts. Create an AWS Lambda function that assumes a role in each AWS account in the organization to authorize inbound rules on security groups based on entries from the DynamoDB table.

Correct Answer: A

Creating a customer-managed prefix list allows for defining and managing sets of IP address ranges, ensuring version control and updates are consistent. AWS Resource Access Manager (RAM) can then securely share this prefix list across multiple AWS accounts within the organization. This approach meets the requirements for managing and sharing a version-controlled list of IPv4 on-premises hosts.

Discussion

BalasmaniamOption: A

https://docs.aws.amazon.com/ram/latest/userguide/getting-started-sharing.html

tycho

A 100%; answers B C D clearly wrong

Akshay0403Option: A

Customer-managed prefix lists — Sets of IP address ranges that you define and manage. AWS Resource Access Manager (AWS RAM) - Helps you securely share your resources across AWS accounts, within your organization or organizational units (OUs).

vikasj1inOption: A

A customer-managed prefix list in AWS allows you to create a list of IPv4 addresses and prefixes that can be shared with multiple resources across accounts and regions. This makes it suitable for managing a list of on-premises IPv4 hosts that need access to AWS resources. This solution provides a centralized and version-controlled way to manage the list of IPv4 addresses, ensuring consistency and ease of updates across multiple accounts in the AWS organization.

AradOption: A

A is correct.