Solutions Architect Associate (Page 59)

A company runs an infrastructure monitoring service.The company is building a new feature that will enable the service to monitor data in customer AWS accounts.The new feature will call AWS APIs in customer accounts to describe Amazon EC2 instances and read Amazon CloudWatch metrics.What should the company do to obtain access to customer accounts in the MOST secure way?Read More →

A company’s HTTP application is behind a Network Load Balancer (NLB).The NLB’s target group is configured to use an Amazon EC2 Auto Scaling group with multiple EC2 instances that run the web service.The company notices that the NLB is not detecting HTTP errors for the application.These errors require a manual restart of the EC2 instances that run the web service.The company needs to improve the application’s availability without writing custom scripts or code.What should a solutions architect do to meet these requirements?Read More →

A company runs its critical database on an Amazon RDS for PostgreSQL DB instance.The company wants to migrate to Amazon Aurora PostgreSQL with minimal downtime and data loss.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is working with an external vendor that requires write access to the company’s Amazon Simple Queue Service (Amazon SQS) queue.The vendor has its own AWS account.What should a solutions architect do to implement least privilege access?Read More →

A company is deploying a new application on Amazon EC2 instances.The application writes data to Amazon Elastic Block Store (Amazon EBS) volumes.The company needs to ensure that all data that is written to the EBS volumes is encrypted at rest.Which solution will meet this requirement?Read More →

A company is storing sensitive user information in an Amazon S3 bucket.The company wants to provide secure access to this bucket from the application tier running on Amazon EC2 instances inside a VPC.Which combination of steps should a solutions architect take to accomplish this? (Choose two.)Read More →

A solutions architect needs to allow team members to access Amazon S3 buckets in two different AWS accounts: a development account and a production account.The team currently has access to S3 buckets in the development account by using unique IAM users that are assigned to an IAM group that has appropriate permissions in the account.The solutions architect has created an IAM role in the production account.The role has a policy that grants access to an S3 bucket in the production account.Which solution will meet these requirements while complying with the principle of least privilege?Read More →

A payment processing company records all voice communication with its customers and stores the audio files in an Amazon S3 bucket.The company needs to capture the text from the audio files.The company must remove from the text any personally identifiable information (PII) that belongs to customers.What should a solutions architect do to meet these requirements?Read More →

A company is developing an application to support customer demands.The company wants to deploy the application on multiple Amazon EC2 Nitro-based instances within the same Availability Zone.The company also wants to give the application the ability to write to multiple block storage volumes in multiple EC2 Nitro-based instances simultaneously to achieve higher application availability.Which solution will meet these requirements?Read More →

A company’s order fulfillment service uses a MySQL database.The database needs to support a large number of concurrent queries and transactions.Developers are spending time patching and tuning the database.This is causing delays in releasing new product features.The company wants to use cloud-based services to help address this new challenge.The solution must allow the developers to migrate the database with little or no code changes and must optimize performance.Which service should a solutions architect use to meet these requirements?Read More →