An ecommerce company is creating an application that requires a connection to a third-party payment service to process payments. The payment service needs to explicitly allow the public IP address of the server that is making the payment request. However, the company's security policies do not allow any server to be exposed directly to the public internet. Which solution will meet these requirements?

Question

Quizplus · Accepted Answer

A NAT gateway allows instances in a private subnet to connect to the internet or other AWS services while preventing the internet from initiating a connection with those instances. This setup meets the requirement of not exposing servers directly to the public internet while allowing the payment service to whitelist the NAT gateway's public IP.

An Ecommerce Company Is Creating an Application That Requires a Connection