Repair the API subnet return path
Try this labAll SAA-C03 practice
- Certification
- SAA-C03
- Format
- Artifact workspace
- Difficulty
- medium
- Estimated time
- 16 min
- Automated checks
- 9
SCENARIO
A partner sends HTTPS callbacks from 198.51.100.0/24 to ApiSubnet. The security group and routes work, but the custom network ACL disrupts approved return traffic and exposes unrelated access. Partner clients use response ports across 1024-65535.
TASK
Repair api-subnet.yaml so its custom network ACL protects ApiSubnet and permits only inbound partner TCP 443 and the corresponding outbound response path. Preserve ServiceVpc and ApiSubnet, and permit no additional IPv4 or IPv6 traffic.