study aws cloud (Page 563)

A company used AWS CloudFormation to create all new infrastructure in its AWS member accounts.The resources rarely change and are properly sized for the expected load.The monthly AWS bill is consistent.Occasionally, a developer creates a new resource for testing and forgets to remove the resource when the test is complete.Most of these tests last a few days before the resources are no longer needed.The company wants to automate the process of finding unused resources.A solutions architect needs to design a solution that determines whether the cost in the AWS bill is increasing.The solution must help identify resources that cause an increase in cost and must automatically notify the company’s operations team.Which solution will meet these requirements?Read More →

A company wants to provide desktop as a service (DaaS) to a number of employees using Amazon WorkSpaces.WorkSpaces will need to access files and services hosted on premises with authorization based on the company’s Active Directory.Network connectivity will be provided through an existing AWS DirectConnect connection.The solution has the following requirements:✑ Credentials from Active Directory should be used to access on-premises files and services.✑ Credentials from Active Directory should not be stored outside the company.✑ End users should have single sign-on (SSO) to on-premises files and services once connected to WorkSpaces.Which strategy should the solutions architect use for end user authentication?Read More →

A company has an on-premises data center and is using Kubernetes to develop a new solution on AWS.The company uses Amazon Elastic Kubernetes Service (Amazon EKS) clusters for its development and test environments.The EKS control plane and data plane for production workloads must reside on premises.The company needs an AWS managed solution for Kubernetes management.Which solution will meet these requirements with the LEAST operational overhead?Read More →