VCP-VMC 2024 Question 155
Select 2You are tasked with deploying a VMware Cloud on AWS Software-Defined Data Center (SDDC) in a customer's multi-cloud environment. As part of the deployment, it is critical to ensure that the correct account access and privileges are configured. Which of the following permissions must be granted to the AWS account used for the deployment?
- A
Full administrative access to the AWS account
- B
IAM policy permissions to create and manage Elastic Network Interfaces (ENIs)
- C
Permission to launch and terminate EC2 instances
- D
IAM policy permissions to create and associate Elastic IPs
- E
Read-only access to AWS CloudFormation templates
Show answer and explanation
Correct answers: B, D
Explanation
When deploying a VMware Cloud on AWS SDDC, specific IAM permissions are required for the AWS account to ensure proper configuration and operation of the SDDC. These permissions include managing Elastic Network Interfaces (ENIs) to handle networking between the SDDC and the AWS account, and creating and associating Elastic IPs for internet-facing connectivity. Full administrative access or permissions to launch/terminate EC2 instances are not necessary, as VMware handles the infrastructure within the SDDC.
- A. Incorrect.
Full administrative access to the AWS account is not required. VMware Cloud on AWS only requires specific permissions to manage networking and resources related to the SDDC deployment.
- B. Correct.
Permissions to create and manage Elastic Network Interfaces (ENIs) are required because VMware Cloud on AWS uses ENIs to connect the SDDC to the customer's AWS account for networking purposes.
- C. Incorrect.
Launching and terminating EC2 instances is not part of the required permissions for VMware Cloud on AWS. VMware manages the EC2 instances internally for the SDDC.
- D. Correct.
Permissions to create and associate Elastic IPs are required as VMware Cloud on AWS uses Elastic IPs for internet-facing connectivity for the SDDC resources.
- E. Incorrect.
Read-only access to AWS CloudFormation templates is not required. CloudFormation templates are not utilized as part of the standard VMware Cloud on AWS deployment process.