SAA-C03 (Page 53)

A solutions architect is designing an AWS Identity and Access Management (IAM) authorization model for a company’s AWS account.The company has designated five specific employees to have full access to AWS services and resources in the AWS account.The solutions architect has created an IAM user for each of the five designated employees and has created an IAM user group.Which solution will meet these requirements?Read More →

To meet security requirements, a company needs to encrypt all of its application data in transit while communicating with an Amazon RDS MySQL DB instance.A recent security audit revealed that encryption at rest is enabled using AWS Key Management Service (AWS KMS), but data in transit is not enabled.What should a solutions architect do to satisfy the security requirements?Read More →

A company is designing a new web service that will run on Amazon EC2 instances behind an Elastic Load Balancing (ELB) load balancer.However, many of the web service clients can only reach IP addresses authorized on their firewalls.What should a solutions architect recommend to meet the clients’ needs?Read More →

A financial services company wants to shut down two data centers and migrate more than 100 TB of data to AWS.The data has an intricate directory structure with millions of small files stored in deep hierarchies of subfolders.Most of the data is unstructured, and the company’s file storage consists of SMB-based storage types from multiple vendors.The company does not want to change its applications to access the data after migration.What should a solutions architect do to meet these requirements with the LEAST operational overhead?Read More →

A company runs an AWS Lambda function in private subnets in a VPC.The subnets have a default route to the internet through an Amazon EC2 NAT instance.The Lambda function processes input data and saves its output as an object to Amazon S3.Intermittently, the Lambda function times out while trying to upload the object because of saturated traffic on the NAT instance’s network.The company wants to access Amazon S3 without traversing the internet.Which solution will meet these requirements?Read More →

An ecommerce company runs applications in AWS accounts that are part of an organization in AWS Organizations.The applications run on Amazon Aurora PostgreSQL databases across all the accounts.The company needs to prevent malicious activity and must identify abnormal failed and incomplete login attempts to the databases.Which solution will meet these requirements in the MOST operationally efficient way?Read More →

A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard.A solutions architect needs to design a solution that can handle large traffic spikes, process the mobile game updates in order of receipt, and store the processed updates in a highly available database.The company also wants to minimize the management overhead required to maintain the solution.What should the solutions architect do to meet these requirements?Read More →

A company migrated millions of archival files to Amazon S3.A solutions architect needs to implement a solution that will encrypt all the archival data by using a customer-provided key.The solution must encrypt existing unencrypted objects and future objects.Which solution will meet these requirements?Read More →

A company’s application uses Network Load Balancers, Auto Scaling groups, Amazon EC2 instances, and databases that are deployed in an Amazon VPC.The company wants to capture information about traffic to and from the network interfaces in near real time in its Amazon VPC.The company wants to send the information to Amazon OpenSearch Service for analysis.Which solution will meet these requirements?Read More →

The DNS provider that hosts a company’s domain name records is experiencing outages that cause service disruption for a website running on AWS.The company needs to migrate to a more resilient managed DNS service and wants the service to run on AWS.What should a solutions architect do to rapidly migrate the DNS hosting service?Read More →