Solutions Architect Associate (Page 75)

A company needs a solution to prevent AWS CloudFormation stacks from deploying AWS Identity and Access Management (IAM) resources that include an inline policy or “*” in the statement.The solution must also prohibit deployment of Amazon EC2 instances with public IP addresses.The company has AWS Control Tower enabled in its organization in AWS Organizations.Which solution will meet these requirements?Read More →

A company has an API-based inventory reporting application running on Amazon EC2 instances.The application stores information in an Amazon DynamoDB table.The company’s distribution centers have an on-premises shipping application that calls an API to update the inventory before printing shipping labels.The company has been experiencing application interruptions several times each day, resulting in lost transactions.What should a solutions architect recommend to improve application resiliency?Read More →

A company has AWS Lambda functions that use environment variables.The company does not want its developers to see environment variables in plaintext.Which solution will meet these requirements?Read More →

A company has a three-tier environment on AWS that ingests sensor data from its users’ devices.The traffic flows through a Network Load Balancer (NLB) then toAmazon EC2 instances for the web tier, and finally toEC2 instances for the application tier that makes database calls.What should a solutions architect do to improve the security of data in transit to the web tier?Read More →

A company has a mobile app for customers.The app’s data is sensitive and must be encrypted at rest.The company uses AWS Key Management Service (AWS KMS).The company needs a solution that prevents the accidental deletion of KMS keys.The solution must use Amazon Simple Notification Service (Amazon SNS) to send an email notification to administrators when a user attempts to delete a KMS key.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is preparing to store confidential data in Amazon S3.For compliance reasons, the data must be encrypted at rest.Encryption key usage must be logged for auditing purposes.Keys must be rotated every year.Which solution meets these requirements and is the MOST operationally efficient?Read More →

A company has a web application for travel ticketing.The application is based on a database that runs in a single data center in North America.The company wants to expand the application to serve a global user base.The company needs to deploy the application to multiple AWS Regions.Average latency must be less than 1 second on updates to the reservation database.The company wants to have separate deployments of its web platform across multiple Regions.However, the company must maintain a single primary reservation database that is globally consistent.Which solution should a solutions architect recommend to meet these requirements?Read More →

A media company has an application that tracks user clicks on its websites and performs analytics to provide near-real time recommendations. The application has a Heel of Amazon EC2 instances that receive data from the websites and send the data to an Amazon RDS DB instance. Another fleet of EC2 instances hosts the portion of the application that is continuously checking changes in the database and executing SQL queries to provide recommendations. Management has requested a redesign to decouple the infrastructure. The solution must ensure that data analysts are writing SQL to analyze the data only No data can the lost during the deployment.What should a solutions architect recommend?Read More →

A solutions architect runs a web application on multiple Amazon EC2 instances that are in individual target groups behind an Application Load Balancer (ALB).Users can reach the application through a public website.The solutions architect wants to allow engineers to use a development version of the website to access one specific development EC2 instance to test new features for the application.The solutions architect wants to use an Amazon Route 53 hosted zone to give the engineers access to the development instance.The solution must automatically route to the development instance even if the development instance is replaced.Which solution will meet these requirements?Read More →

A company that operates a web application on premises is preparing to launch a newer version of the application on AWS.The company needs to route requests to either the AWS-hosted or the on-premises-hosted application based on the URL query string.The on-premises application is not available from the internet, and a VPN connection is established between Amazon VPC and the company’s data center.The company wants to use an Application Load Balancer (ALB) for this launch.Which solution meets these requirements?Read More →