A developer has an application that uses an AWS Lambda function to upload files to Amazon S3 and needs the required permissions to perform the task.The developer already has an IAM user with valid IAM credentials required for Amazon S3.What should a solutions architect do to grant the permissions?Read More →
A company has VPC flow logs enabled for Its NAT gateway.The company is seeing Action = ACCEPT for inbound traffic that comes from public IP address 198.51.100.2 destined for a private Amazon EC2 instance.A solutions architect must determine whether the traffic represents unsolicited inbound connections from the internet.The first two octets of the VPC CIDR block are 203.0.Which set of steps should the solutions architect take to meet these requirements?Read More →
Which AWS service is always provided at no charge?Read More →
A company develops applications in separate AWS accounts that are all part of an organization in AWS Organizations.An operations team creates an IAM user for each developer for a given application.As the company has grown, the number of applications has increased.Developers now work on several applications and need to view and access all their project accounts.A solutions architect must design a solution that minimizes the operational overhead for the operations team.What should the solutions architect do to meet these requirements?Read More →
Which AWS service is a relational database compatible with MySQL and PostgreSQL?Read More →
A financial services company receives a regular data feed from its credit card servicing partner.Approximately 5,000 records are sent every 15 minutes in plaintext, delivered over HTTPS directly into an Amazon S3 bucket with server-side encryption.This feed contains sensitive credit card primary account number(PAN) data.The company needs to automatically mask the PAN before sending the data to another S3 bucket for additional internal processing.The company also needs to remove and merge specific fields, and then transform the record into JSON format.Additionally, extra feeds are likely to be added in the future, so any design needs to be easily expandable.Which solutions will meet these requirements?Read More →
An ecommerce company stores terabytes of customer data in the AWS Cloud.The data contains personally identifiable information (PII).The company wants to use the data in three applications.Only one of the applications needs to process the PII.The PII must be removed before the other two applications process the data.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A company consists or two separate business units.Each business unit has its own AWS account within a single organization in AWS Organizations.The business units regularly share sensitive documents with each other.To facilitate sharing, the company created an Amazon S3 bucket in each account and configured low-way replication between the S3 buckets.The S3 buckets have millions of objects.Recently, a security audit identified that neither S3 bucket has encryption at rest enabled.Company policy requires that all documents must be stored with encryption at rest.The company wants to implement server-side encryption with Amazon S3 managed encryption keys (SSE-S3).What is the MOST operationally efficient solution that meets these requirements?Read More →
A company needs to design an AWS disaster recovery plan to cover multiple geographic areas.Which action will meet this requirement?Read More →
A survey company has gathered data for several years from areas in the United States.The company hosts the data in an Amazon S3 bucket that is 3 TB in size and growing.The company has started to share the data with a European marketing firm that has S3 buckets.The company wants to ensure that its data transfer costs remain as low as possible.Which solution will meet these requirements?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.