A company has set up an application on an EC2 Instance in a private subnet. This Instance is used to process videos. The Instance has been enabled with Enhanced Networking. The Instance now needs to get videos from an S3 bucket for processing. When the EC2 Instance tries to access the S3 bucket, a 403 error is returned. What needs to be done to ensure that the error gets resolved?

Answer options:

A.An IAM Role has to be assigned to the Instance to access S3.
B.Ensure that a VPC endpoint is created and attached to the EC2 Instance.
C.Ensure that the CIDR range for the S3 bucket is added to the Security Groups for theEC2 Instance.
D.Ensure that the CIDR range for the S3 bucket is added to the NACLs for the subnet.

Answer – A
The object owner must assign an IAM Role to the particular Instance to access S3.
Option B is incorrect since the VPC endpoint needs to be attached to the subnet ( the subnet in which the EC2 instances are placed ).
Options C and D are incorrect since adding the CIDR range will not help.
For more information on VPC gateways, please refer to the below URLs
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpce-gateway.html
https://docs.aws.amazon.com/AmazonS3/latest/dev/s3-dg.pdf ( page 606 )