Solutions Architect Professional (Page 115)

A large company experienced a drastic increase in its monthly AWS spend.This is after Developers accidentally launched Amazon EC2 instances in unexpected regions.The company has established practices around least privileges for Developers and controls access to on-premises resources using Active Directory groups.The company now want to control costs by restricting the level of access that Developers have to the AWS Management Console without impacting their productivity.The company would also like to allow Developers to launch Amazon EC2 in only one region, without limiting access to other services in any region.How can this company achieve these new security requirements while minimizing the administrative burden on the Operations team?Read More →

A company has a serverless application comprised of Amazon CloudFront, Amazon API Gateway, and AWS Lambda functions.The current deployment process of the application code is to create a new version number of the Lambda function and run an AWS CLI script to update.If the new function version has errors, another CLI script reverts by deploying the previous working version of the function.The company would like to decrease the time to deploy new versions of the application logic provided by the Lambda functions, and also reduce the time to detect and revert when errors are identified.How can this be accomplished?Read More →

An on-premises application will be migrated to the cloud.The application consists of a single Elasticsearch virtual machine with data source feeds from local systems that will not be migrated, and a Java web application on Apache Tomcat running on three virtual machines.The Elasticsearch server currently uses 1 TB of storage out of 16 TB available storage, and the web application is updated every 4 months.Multiple users access the web application from the Internet.There is a 10Gbit AWS Direct Connect connection established, and the application can be migrated over a scheduled 48-hour change window.Which strategy will have the LEAST impact on the Operations staff after the migration?Read More →

A group of research institutions and hospitals are in a partnership to study 2 PBs of genomic data.The institute that owns the data stores it in an Amazon S3 bucket and updates it regularly.The institute would like to give all of the organizations in the partnership read access to the data.All members of the partnership are extremely cost-conscious, and the institute that owns the account with the S3 bucket is concerned about covering the costs for requests and data transfers from Amazon S3.Which solution allows for secure datasharing without causing the institute that owns the bucket to assume all the costs for S3 requests and data transfers?Read More →

A company currently uses a single 1 Gbps AWS Direct Connect connection to establish connectivity between an AWS Region and its data center.The company has five Amazon VPCs, all of which are connected to the data center using the same Direct Connect connection.The Network team is worried about the single point of failure and is interested in improving the redundancy of the connections to AWS while keeping costs to a minimum.Which solution would improve the redundancy of the connection to AWS while meeting the cost requirements?Read More →

Your company is storing millions of sensitive transactions across thousands of 100-GB files that must be encrypted in transit and at rest.Analysts concurrently depend on subsets of files, which can consume up to 5 TB of space, to generate simulations that can be used to steer business decisions.You are required to design an AWS solution that can cost effectively accommodate the long-term storage and in-flight subsets of data.Which approach can satisfy these objectives?Read More →

You have launched an EC2 instance with four (4) 500 GB EBS Provisioned IOPS volumes attached.The EC2 instance is EBS-Optimized and supports 500 Mbps throughput between EC2 and EBS.The four EBS volumes are configured as a single RAID 0 device, and each Provisioned IOPS volume is provisioned with 4,000IOPS (4,000 16KB reads or writes), for a total of 16,000 random IOPS on the instance.The EC2 instance initially delivers the expected 16,000 IOPS random read and write performance.Sometime later, in order to increase the total random I/O performance of the instance, you add an additional two 500 GB EBS ProvisionedIOPS volumes to the RAID.Each volume is provisioned to 4,000 IOPs like the original four, for a total of 24,000 IOPS on the EC2 instance.Monitoring shows that the EC2 instance CPU utilization increased from 50% to 70%, but the total random IOPS measured at the instance level does not increase at all.What is the problem and a valid solution?Read More →

How is AWS readily distinguished from other vendors in the traditional IT computing landscape?Read More →

What does elasticity mean to AWS?Read More →

The following policy can be attached to an IAM group.It lets an IAM user in that group access a “home directory” in AWS S3 that matches their user name using the console.{“Version”: “2012-10-17″,”Statement”: [{“Action”: [“s3:*”],”Effect”: “Allow”,”Resource”: [“arn:aws:s3:::bucket-name”],”Condition”:{“StringLike”:{“s3:prefix”:[“home/${aws:username}/*”]}}},{“Action”:[“s3:*”],”Effect”:”Allow”,”Resource”: [“arn:aws:s3:::bucket-name/home/${aws:username}/*”]}]}Read More →