CSAA – Design Secure Architectures – wrong answer

[mikymg]

Hello,

This quiestion in the Architect Associate marks the correct answer as shown in the attached image:

A startup company is developing a new application in AWS. The architecture is a web application with an Amazon Elastic Container Service (Amazon ECS) cluster, an Amazon S3 bucket where the application assets are stored, and a managed Amazon RDS for MySQL Database. The database layer of the web application contains personally identifiable information (PII) data. As part of compliance requirements, data in both the RDS for MySQL database, and the S3 bucket should be securely accessed only by the ECS cluster.

How should the system be designed to satisfy this requirement?

I think the correct answer that the system marks is actually wrong because there’s no VPC endpoint to connect to the RDS, is only one, the s3 endpoint. With the s3 endpoint and the SG is enough to access securely to the RDS.

This mistake makes me choose the wrong answer in my first try,

Thanks

[Menna Nazmi]

i think its KMS custom

[Nikee-TutorialsDojo]

Hello Everyone,

Thank you for reaching out and providing your feedback on the question from the AWS Architect Associate exam. We appreciate you taking the time to share your thoughts.

We have reviewed your comment and the attached screenshot regarding the system design question. You are correct in pointing out that there should be a VPC endpoint for the RDS service as part of the secure access design. We will thoroughly review and update the question to ensure that the details and the correct answer align with the requirements for secure ECS access to both RDS and S3, including the use of appropriate endpoints and security group settings.

Your feedback is invaluable in helping us ensure the quality and accuracy of our content, and we will take the necessary steps to correct the issue. We will notify you once the update has been made.

If you have any other questions or further concerns, please don’t hesitate to reach out.

Thank you for your understanding and support.

Best regards,

Nikee @ Tutorials Dojo