What should the company do to restrict the developers’ ability to push changes to the main branch directly?

2026-03-25
By:
In: DOP-C02
With: 2 Comments

A company uses AWS CodeCommit for source code control.Developers apply their changes to various feature branches and create pull requests to move those changes to the main branch when the changes are ready for production.The developers should not be able to push changes directly to the main branch.The company applied the AWSCodeCommitPowerUser managed policy to the developers’ IAM role, and now these developers can push changes to the main branch directly on every repository in the AWS account.What should the company do to restrict the developers’ ability to push changes to the main branch directly?Read More →

Which solution will meet these requirements with the LEAST operational overhead?

2026-03-25
By:
In: SOA-C02
With: 2 Comments

A company is deploying a third-party unit testing solution that is delivered as an Amazon EC2 Amazon Machine Image (AMI).All system configuration data is stored in Amazon DynamoDB.The testing results are stored in Amazon S3.A minimum of three EC2 instances are required to operate the product.The company’s testing team wants to use an additional three EC2 instances when the Spot Instance prices are at a certain threshold.A SysOps administrator must implement a highly available solution that provides this functionality.Which solution will meet these requirements with the LEAST operational overhead?Read More →

Which solution meets these requirements?

2026-03-25
By:
In: SAP-C01
With: 2 Comments

A solutions architect is designing a solution to connect a company’s on-premises network with all the company’s current and future VPCs on AWS.The company is running VPCs in five different AWS Regions and has at least 15 VPCs in each Region.The company’s AWS usage is constantly increasing and will continue to grow.Additionally, all the VPCs throughout all five Regions must be able to communicate with each other.The solution must maximize scalability and ease of management.Which solution meets these requirements?Read More →

Which set of steps should the software engineering team take?

2026-03-25
By:
In: SCS-C01
With: 2 Comments

A company hosts a web-based application that captures and stores sensitive data in an Amazon DynamoDB table.A security audit reveals that the application does not provide end-to-end data protection or the ability to detect unauthorized data changes.The software engineering team needs to make changes that will address the audit findings.Which set of steps should the software engineering team take?Read More →

Which combination of steps will meet these requirements?

2026-03-25
By:
In: SAP-C02
With: 2 Comments

A company has a few AWS accounts for development and wants to move its production application to AWS.The company needs to enforce Amazon Elastic Block Store (Amazon EBS) encryption at rest current production accounts and future production accounts only.The company needs a solution that includes built-in blueprints and guardrails.Which combination of steps will meet these requirements? (Choose three.)Read More →

What could be the reason that no X-Ray trace data is being returned?

2026-03-25
By:
In: DVA-C01
With: 2 Comments

A company manages a microservices application on Amazon EC2 instances.A developer has integrated the AWS X-Ray SDK with the application.The developer also has an IAM role that is associated with the EC2 instances.The role includes the AWSXRayDaemonWriteAccess managed IAM policy.When the developer queries the X-Ray traces by using the GetServiceGraph API operation, no errors and no trace data are returned.What could be the reason that no X-Ray trace data is being returned? (Choose two.)Read More →