A company would like to use a third-party vendor SaaS product to perform data analytics on data stored inside an Amazon Aurora Serverless cluster. What is the simplest and most secure solution to integrate the SaaS product with the Amazon Aurora cluster?

Answer options:

A.Create a VPC endpoint service inside the Amazon Aurora Serverless cluster’s VPC using AWS PrivateLink.
B.Enable Data API on the Amazon Aurora Serverless cluster.
C.Create a VPC security group rule allowing inbound traffic from the SaaS product IP range. Apply the security group to the Amazon Aurora Serverless cluster’s VPC endpoint.
D.Create a Site-to-site VPN connection from Amazon Aurora Serverless cluster’s VPC to the SaaS product vendor`s network.

Answer: B
Option A is incorrect because this is not the simplest option. It would require provisioning and network configuration of AWS PrivateLink.
Option B is CORRECT because enabling Data API on the Amazon Aurora Serverless cluster allows web-based applications to access the cluster over a secure HTTP endpoint.
Option C is incorrect because this is not the simplest and most secure option as it opens public internet traffic to the private VPC.Option D is incorrect because this is not the simplest, cost-efficient, and secure option. Configuring a VPN connection may not be possible. Even if possible, it is a complex implementation. It is also not recommended from a security point of view because it connects the two networks.
Reference:
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html