Repair the API subnet return path

A hands-on SAA-C03 lab. You produce the real artefact and 9 automated checks verify it behaves the way the exam expects.

Try this labAll SAA-C03 practice

Certification
SAA-C03
Format
Artifact workspace
Difficulty
medium
Estimated time
16 min
Automated checks
9

The brief

Repair api-subnet.yaml. Preserve ServiceVpc and ApiSubnet unchanged. Keep one custom network ACL in ServiceVpc and associate it with ApiSubnet. Allow inbound TCP 443 only from 198.51.100.0/24. Because network ACLs are stateless, allow outbound TCP responses only to that same CIDR across client ports 1024-65535. Do not add any other IPv4 or IPv6 allow entries.

Part of SAA-C03 preparation

Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.