ANS-C01 Question 229
Single answerYou have a VPC with multiple subnets and route tables. Your application hosted in a private subnet is unable to connect to an S3 bucket using an S3 endpoint. You suspect a routing issue. Which AWS tool should you use to identify the specific route configuration or connectivity issue?
- A
AWS Route Analyzer
- B
AWS Reachability Analyzer
- C
AWS CloudTrail
- D
Amazon VPC Flow Logs
Show answer and explanation
Correct answer: B
Explanation
AWS Reachability Analyzer is the best tool to simulate and analyze network connectivity within a VPC. It identifies misconfigurations in routing tables, security groups, and other network components that could block access between resources. In this scenario, you can use Reachability Analyzer to determine why the private subnet cannot connect to the S3 endpoint.
- A. Incorrect.
AWS Route Analyzer is not an actual AWS service; this option is incorrect.
- B. Correct.
AWS Reachability Analyzer is the correct tool for analyzing and troubleshooting connectivity issues within a VPC. It can simulate the routing path and identify misconfigurations in route tables, security groups, and network ACLs.
- C. Incorrect.
AWS CloudTrail monitors API activity and provides a history of AWS API calls, but it does not analyze routes or connectivity issues.
- D. Incorrect.
Amazon VPC Flow Logs capture IP traffic flow data but do not provide a detailed analysis of connectivity or route configurations.