An AWS Lambda function is running in a company’s shared AWS account.The function needs to perform an additional ec2:DescribeInstances action that is directed at the company’s development accounts.A developer must configure the required permissions across the accounts.How should the developer configure the permissions to adhere to the principle of least privilege?Read More →
A company has developed a static website hosted on an Amazon S3 bucket.The website is deployed using AWS CloudFormation.The CloudFormation template defines an S3 bucket and a custom resource that copies content into the bucket from a source location.The company has decided that it needs to move the website to a new location, so the existing CloudFormation stack must be deleted and re-created.However, CloudFormation reports that the stack could not be deleted cleanly.What is the MOST likely cause and how can the DevOps engineer mitigate this problem for this and future versions of the website?Read More →
A company is expanding its fleet of Amazon EC2 instances before an expected increase of traffic.When a SysOps administrator attempts to add more instances, an InstanceLimitExceeded error is returned.What should the SysOps administrator do to resolve this error?Read More →
A customer has established an AWS Direct Connect connection to AWS.The link is up and routes are being advertised from the customer’s end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter.Which of the following options provide a viable solution to remedy this situation? (Choose two.)Read More →
AWS CloudTrail is being used to monitor API calls in an organization.An audit revealed that CloudTrail is failing to deliver events to Amazon S3 as expected.What initial actions should be taken to allow delivery of CloudTrail events to S3? (Choose two.)Read More →
A company needs to ingest and handle large amounts of streaming data that its application generates.The application runs on Amazon EC2 instances and sends data to Amazon Kinesis Data Streams, which is configured with default settings.Every other day, the application consumes the data and writes the data to an Amazon S3 bucket for business intelligence (BI) processing.The company observes that Amazon S3 is not receiving all the data that the application sends to Kinesis Data Streams.What should a solutions architect do to resolve this issue?Read More →
A company is using Amazon API Gateway to deploy a private REST API that will provide access to sensitive data.The API must be accessible only from an application that is deployed in a VPC.The company deploys the API successfully.However, the API is not accessible from an Amazon EC2 instance that is deployed in the VPC.Which solution will provide connectivity between the EC2 instance and the API?Read More →
A developer is storing JSON files in an Amazon S3 bucket.The developer wants to securely share an object with a specific group of people.How can the developer securely provide temporary access to the objects that are stored in the S3 bucket?Read More →
A company has an Amazon S3 bucket containing images of scanned financial invoices.The company is building an artificial intelligence (Al)-based application on AWS.The company wants the application to identify and read total balance amounts on the invoices.Which AWS service will meet these requirements?Read More →
A healthcare company is using an Amazon SageMaker notebook instance to develop machine learning (ML) models.The company’s data scientists will need to be able to access datasets stored in Amazon S3 to train the models.Due to regulatory requirements, access to the data from instances and services used for training must not be transmitted over the internet.Which combination of steps should an ML specialist take to provide this access? (Choose two.)Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.