Solutions Architect Professional (Page 110)

A company’s public API runs as tasks on Amazon Elastic Container Service (Amazon ECS).The tasks run on AWS Fargate behind an Application Load Balancer (ALB) and are configured with Service Auto Scaling for the tasks based on CPU utilization.This service has been running well for several months.Recently, API performance slowed down and made the application unusable.The company discovered that a significant number of SQL injection attacks had occurred against the API and that the API service had scaled to its maximum amount.A solutions architect needs to implement a solution that prevents SQL injection attacks from reaching the ECS API service.The solution must allow legitimate traffic through and must maximize operational efficiency.Which solution meets these requirements?Read More →

During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWSCodeCommit repository.The security team wants to automatically find and remediate instances of this security vulnerability.Which solution will ensure that the credentials are appropriately secured automatically?Read More →

A company is developing a new on-demand video application that is based on microservices.The application will have 5 million users at launch and will have 30 million users after 6 months.The company has deployed the application on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.The company developed the application by using ECS services that use the HTTPS protocol.A solutions architect needs to implement updates to the application by using blue/green deployments.The solution must distribute traffic to each ECS service through a load balancer.The application must automatically adjust the number of tasks in response to an Amazon CloudWatch alarm.Which solution will meet these requirements?Read More →

A company has a data lake in Amazon S3 that needs to be accessed by hundreds of applications across many AWS accounts.The company’s information security policy states that the S3 bucket must not be accessed over the public internet and that each application should have the minimum permissions necessary to function.To meet these requirements, a solutions architect plans to use an S3 access point that is restricted to specific VPCs for each application.Which combination of steps should the solutions architect take to implement this solution? (Choose two.)Read More →

A company has an application that is deployed on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances are part of an Auto Scaling group.The application has unpredictable workloads and frequently scales out and in.The company’s development team wants to analyze application logs to find ways to improve the application’s performance.However, the logs are no longer available after instances scale in.Which solution will give the development team the ability to view the application logs after a scale-in event?Read More →

A company is using AWS Organizations to manage multiple AWS accounts.For security purposes, the company requires the creation of an Amazon SimpleNotification Service (Amazon SNS) topic that enables integration with a third-party alerting system in all the Organizations member accounts.A solutions architect used an AWS CloudFormation template to create the SNS topic and stack sets to automate the deployment of CloudFormation stacks.Trusted access has been enabled in Organizations.What should the solutions architect do to deploy the CloudFormation StackSets in all AWS accounts?Read More →

A company runs an application in an on-premises data center.The application gives users the ability to upload media files.The files persist in a file server.The web application has many users.The application server is overutilized, which causes data uploads to fail occasionally.The company frequently adds new storage to the file server.The company wants to resolve these challenges by migrating the application to AWS.Users from across the United States and Canada access the application.Only authenticated users should have the ability to access the application to upload files.The company will consider a solution that refactors the application, and the company needs to accelerate application development.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using AWS Organizations to manage 15 AWS accounts.A solutions architect wants to run advanced analytics on the company’s cloud expenditures.The cost data must be gathered and made available from an analytics account.The analytics application runs in a VPC and must receive the raw cost data each night to run the analytics.The solutions architect has decided to use the Cost Explorer API to fetch the raw data and store the data in Amazon S3 in JSON format.Access to the raw cost data must be restricted to the analytics application.The solutions architect has already created an AWS Lambda function to collect data by using the Cost ExplorerAPI.Which additional actions should the solutions architect take to meet these requirements?Read More →

A company operates an on-premises software-as-a-service (SaaS) solution that ingests several files daily.The company provides multiple public SFTP endpoints to its customers to facilitate the file transfers.The customers add the SFTP endpoint IP addresses to their firewall allow list for outbound traffic.Changes to the SFTP endpoint IP addresses are not permitted.The company wants to migrate the SaaS solution to AWS and decrease the operational overhead of the file transfer service.Which solution meets these requirements?Read More →

A company deployed a three-tier web application in two regions: us-east-1 and eu-west-1.The application must be active in both regions at the same time.The database tier of the application uses a single Amazon RDS Aurora database globally, with a master in us-east-1 and a read replica in eu-west-1.Both regions are connected by a VPN.The company wants to ensure that the application remains available even in the event of a region-level failure of all of the application’s components.It is acceptable for the application to be in read-only mode for up to 1 hour.The company plans to configure two Amazon Route 53 record sets, one for each of the regions.How should the company complete the configuration to meet its requirements while providing the lowest latency for the application end-users? (Choose two.)Read More →