Your development team has set an application on an EC2 Instance. This instance is currently sitting in a private subnet. The application needs to make use of Kinesis streams. How would you ensure that the application would be able to make use of the Kinesis streams service?

Answer options:

A.Ensure that an Internet gateway is attached to the VPC.B.Ensure an Egress-only Internet gateway.
C.Use a VPC Endpoint gateway.
D.Use an Interface VPC Endpoint.

Answer – D
The AWS Documentation mentions the following.
You can use an interface VPC endpoint to keep traffic between your Amazon VPC and Kinesis Data Streams from leaving the Amazon network. Interface VPC endpoints don`t require an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. Interface VPC endpoints are powered by AWS PrivateLink, an AWS technology that enables private communication between AWS services using an elastic network interface with private IPs in your Amazon VPC.Option A is incorrect since the Instance should not be moved to a public subnet just for this type of access.
Option B is incorrect since this is used for IPv6 traffic specifically.
Option C is incorrect since this is only used with the S3 and DynamoDB service.
For more information on using streams within a VPC, please refer to the below URL-
https://docs.aws.amazon.com/streams/latest/dev/vpc.html