What should a database specialist do to resolve this issue while minimizing access to external resources?

A company has applications running on Amazon EC2 instances in a private subnet with no internet connectivity. The company deployed a new application that uses Amazon DynamoDB, but the application cannot connect to the DynamoDB tables. A developer already checked that all permissions are set correctly.

What should a database specialist do to resolve this issue while minimizing access to external resources?
A . Add a route to an internet gateway in the subnet’s route table.
B. Add a route to a NAT gateway in the subnet’s route table.
C. Assign a new security group to the EC2 instances with an outbound rule to ports 80 and 443.
D. Create a VPC endpoint for DynamoDB and add a route to the endpoint in the subnet’s route table.

View Answer

Answer: D

Explanation:

https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-dynamodb.html