A Start-up firm is using an Amazon EC2 instance launched in Amazon VPC to deploy its applications. They are using AWS Systems Manager to view & automate operational tasks for AWS resources. The Security Team has mandated that all traffic flow between AWS Systems manager & managed instances launched in AWS should be highly secure.
What configuration can be used to make this connectivity secure?

Answer options:

A.Configure AWS Systems Manager to use Gateway VPC endpoint in an Amazon VPC.B.Configure outbound internet access from managed instance using NAT instance
C.Configure AWS Systems Manager to use Interface VPC endpoint in an Amazon VPC.D.Configure outbound internet access from managed Instance using NAT Gateway.

Correct Answer: C
Communication between AWS Systems Manager & managed Instance can be established using interface VPC endpoint in an Amazon VPC. With this setup, internet access is not required for a managed instance, and traffic can flow in a secure private connectivity.
Option A is incorrect as the Gateway VPC endpoint is not supported for AWS Systems Manager.
Options B & D are incorrect as with NAT devices, managed instance & System Manager traffic would be flowing over the internet instead of secure private connection.
For more information on private connectivity between AWS Systems Manager & managed instance, refer to the following URLs
https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-create-vpc.html
https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started-privatelink.html