Question

A CloudOps engineer has enabled IPv6 on a VPC. EC2 instances in a private subnet have IPv6 addresses and must initiate outbound connections to external APIs over IPv6 to download updates. For security, these external hosts must NOT be able to initiate inbound connections to the instances. The instances do not need IPv4 internet access. What should the engineer configure to meet these requirements?

Accepted Answer

Add a route in the private subnet's route table pointing ::/0 to an egress-only internet gateway attached to the VPC.

Answer

Add a route in the private subnet's route table pointing ::/0 to a NAT gateway in a public subnet.

Answer

Add a route in the private subnet's route table pointing ::/0 to an internet gateway attached to the VPC.

Answer

Attach an Elastic IP to each instance and add a route pointing ::/0 to a NAT instance.