DevOps Engineer Professional (Page 43)

A company operates sensitive workloads across the AWS accounts that are in the company’s organization in AWS Organizations.The company uses an IP address range to delegate IP addresses for Amazon VPC CIDR blocks and all non-cloud hardware.The company needs a solution that prevents principals that are outside the company’s IP address range from performing AWS actions in the organization’s accounts.Which solution will meet these requirements?Read More →

A company releases a new application in a new AWS account.The application includes an AWS Lambda function that processes messages from an Amazon Simple Queue Service (Amazon SQS) standard queue.The Lambda function stores the results in an Amazon S3 bucket for further downstream processing.The Lambda function needs to process the messages within a specific period of time after the messages are published.The Lambda function has a batch size of 10 messages and takes a few seconds to process a batch of messages.As load increases on the application’s first day of service, messages in the queue accumulate at a greater rate than the Lambda function can process the messages.Some messages miss the required processing timelines.The logs show that many messages in the queue have data that is not valid.The company needs to meet the timeline requirements for messages that have valid data.Which solution will meet these requirements?Read More →

A healthcare services company is concerned about the growing costs of software licensing for an application for monitoring patient wellness.The company wants to create an audit process to ensure that the application is running exclusively on Amazon EC2 Dedicated Hosts.A DevOps engineer must create a workflow to audit the application to ensure compliance.What steps should the engineer take to meet this requirement with the LEAST administrative overhead?Read More →

A company’s DevOps engineer is working in a multi-account environment.The company uses AWS Transit Gateway to route all outbound traffic through a network operations account.In the network operations account, all account traffic passes through a firewall appliance for inspection before the traffic goes to an internet gateway.The firewall appliance sends logs to Amazon CloudWatch Logs and includes event severities of CRITICAL, HIGH, MEDIUM, LOW, and INFO.The security team wants to receive an alert if any CRITICAL events occur.What should the DevOps engineer do to meet these requirements?Read More →