You build and deploy a Go RESTful API in AWS Elastic Beanstalk. Several other applications need to call the API. For security reasons, the connectivity between applications and the API in Elastic Beanstalk should be private. That means the traffic should not be exposed to the public internet. How to achieve this requirement?

Answer options:

A.Disable the internet access of Elastic Beanstalk by removing the public IP address in the settings.
B.Configure the Elastic Beanstalk in the private subnet and create a NAT gateway in the public subnet.
C.Configure an API in API Gateway for the Elastic Beanstalk application.
D.Set up a VPC endpoint for Elastic Beanstalk and enable other applications to send requests to Elastic Beanstalk using AWS PrivateLink.

Correct Answer – D
Option A is incorrect: Because this method does not enable private connections between applications and Elastic Beanstalk.
Option B is incorrect: Because the NAT gateway is for internet access and does not help in this question.
Option C is incorrect: Because the API in API Gateway does not provide a private connection.
Option D is CORRECT: Because the VPC endpoint provides a private connection for the Elastic Beanstalk service.
Reference:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/vpc-vpce.html