Solutions Architect Professional (Page 110)

A company is hosting a three-tier web application in an on-premises environment.Due to a recent surge in traffic that resulted in downtime and a significant financial impact, company management has ordered that the application be moved to AWS.The application is written in .NET and has a dependency on a MySQL database.A solutions architect must design a scalable and highly available solution to meet the demand of 200,000 daily users.Which steps should the solutions architect take to design an appropriate solution?Read More →

A company’s solutions architect needs to provide secure Remote Desktop connectivity to users for Amazon EC2 Windows instances that are hosted in a VPC.The solution must integrate centralized user management with the company’s on-premises Active Directory.Connectivity to the VPC is through the internet.The company has hardware that can be used to establish an AWS Site-to-Site VPN connection.Which solution will meet these requirements MOST cost-effectively?Read More →

An external audit of a company’s serverless application reveals IAM policies that grant too many permissions.These policies are attached to the company’s AWS Lambda execution roles.Hundreds of the company’s Lambda functions have broad access permissions, such as full access to Amazon S3 buckets and Amazon DynamoDB tables.The company wants each function to have only the minimum permissions that the function needs to complete its task.A solutions architect must determine which permissions each Lambda function needs.What should the solutions architect do to meet this requirement with the LEAST amount of effort?Read More →

A software company has deployed an application that consumes a REST API by using Amazon API Gateway, AWS Lambda functions, and an AmazonDynamoDB table.The application is showing an increase in the number of errors during PUT requests.Most of the PUT calls come from a small number of clients that are authenticated with specific API keys.A solutions architect has identified that a large number of the PUT requests originate from one client.The API is noncritical, and clients can tolerate retries of unsuccessful calls.However, the errors are displayed to customers and are causing damage to the API’s reputation.What should the solutions architect recommend to improve the customer experience?Read More →

A company has a media catalog with metadata for each item in the catalog.Different types of metadata are extracted from the media items by an application running on AWS Lambda.Metadata is extracted according to a number of rules with the output stored in an Amazon ElastiCache for Redis cluster.The extraction process is done in batches and takes around 40 minutes to complete.The update process is triggered manually whenever the metadata extraction rules change.The company wants to reduce the amount of time it takes to extract metadata from its media catalog.To achieve this, a solutions architect has split the single metadata extraction Lambda function into a Lambda function for each type of metadata.Which additional steps should the solutions architect take to meet the requirements?Read More →

A company has five physical data centers in specific locations around the world.Each data center has hundreds of physical servers with a mix of Windows andLinux-based applications and database services.Each data center also has an AWS Direct Connect connection of 10 Gbps to AWS with a company-approvedVPN solution to ensure that data transfer is secure.The company needs to shut down the existing data centers as quickly as possible and migrate the servers and applications to AWS.Which solution meets these requirements?Read More →

A company implements a containerized application by using Amazon Elastic Container Service (Amazon ECS) and Amazon API Gateway.The application data is stored in Amazon Aurora databases and Amazon DynamoDB databases.The company automates infrastructure provisioning by using AWS CloudFormation.The company automates application deployment by using AWS CodePipeline.A solutions architect needs to implement a disaster recovery (DR) strategy that meets an RPO of 2 hours and an RTO of 4 hours.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is developing a new service that will be accessed using TCP on a static port.A solutions architect must ensure that the service is highly available, has redundancy across Availability Zones, and is accessible using the DNS name my.service.com, which is publicly accessible.The service must use fixed address assignments so other companies can add the addresses to their allow lists.Assuming that resources are deployed in multiple Availability Zones in a single Region, which solution will meet these requirements?Read More →

A company has migrated a legacy application to the AWS Cloud.The application runs on three Amazon EC2 instances that are spread across three Availability Zones.One EC2 instance is in each Availability Zone.The EC2 instances are running in three private subnets of the VPC and are set up as targets for an Application Load Balancer (ALB) that is associated with three public subnets.The application needs to communicate with on-premises systems.Only traffic from IP addresses in the company’s IP address range are allowed to access the on-premises systems.The company’s security team is bringing only one IP address from its internal IP address range to the cloud.The company has added this IP address to the allow list for the company firewall.The company also has created an Elastic IP address for this IP address.A solutions architect needs to create a solution that gives the application the ability to communicate with the on-premises systems.The solution also must be able to mitigate failures automatically.Which solution will meet these requirements?Read More →

A solutions architect is auditing the security setup of an AWS Lambda function for a company.The Lambda function retrieves the latest changes from an Amazon Aurora database.The Lambda function and the database run in the same VPC.Lambda environment variables are providing the database credentials to the Lambda function.The Lambda function aggregates data and makes the data available in an Amazon S3 bucket that is configured for server-side encryption with AWS KMS managed encryption keys (SSE-KMS).The data must not travel across the internet.If any database credentials become compromised, the company needs a solution that minimizes the impact of the compromise.What should the solutions architect recommend to meet these requirements?Read More →