問題文
An internal API in a Private Space must be consumable by other apps in the space and by software in a peered VPC, with request logs. Which decisions are required, and when?
選択肢
- Enable internal routing on the existing app and route only the two dyno subnets in the VPC, because those subnets are where the addresses that the internally routed endpoint resolves to are allocated from inside the space's private network.
- Create the app with internal routing at creation time, and route the whole space address range in the VPC because the endpoint used for internally routed apps is not inside the dyno ranges.
- Use DNS service discovery so the VPC can resolve the process type's name, and the routing stack then terminates encryption and writes a log line for every request that the partner's software sends to the API.
- Add the VPC's range to the trusted IP ranges.