Solutions Architect Professional (Page 16)

A financial services company receives a regular data feed from its credit card servicing partner.Approximately 5,000 records are sent every 15 minutes in plaintext, delivered over HTTPS directly into an Amazon S3 bucket with server-side encryption.This feed contains sensitive credit card primary account number(PAN) data.The company needs to automatically mask the PAN before sending the data to another S3 bucket for additional internal processing.The company also needs to remove and merge specific fields, and then transform the record into JSON format.Additionally, extra feeds are likely to be added in the future, so any design needs to be easily expandable.Which solutions will meet these requirements?Read More →

A company has VPC flow logs enabled for Its NAT gateway.The company is seeing Action = ACCEPT for inbound traffic that comes from public IP address 198.51.100.2 destined for a private Amazon EC2 instance.A solutions architect must determine whether the traffic represents unsolicited inbound connections from the internet.The first two octets of the VPC CIDR block are 203.0.Which set of steps should the solutions architect take to meet these requirements?Read More →

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods.The company’s internal applications use the API for core functionality and business logic.The company’s customers use the API to access data from their accounts.Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.What should a solutions architect do to meet these requirements?Read More →

A company is using AWS CloudFormation to deploy its infrastructure.The company is concerned that, if a production CloudFormation stack is deleted, important data stored in Amazon RDS databases or Amazon EBS volumes might also be deleted.How can the company prevent users from accidentally deleting data in this way?Read More →

A company has its cloud infrastructure on AWS.A solutions architect needs to define the infrastructure as code.The infrastructure is currently deployed in oneAWS Region.The company’s business expansion plan includes deployments in multiple Regions across multiple AWS accounts.What should the solutions architect do to meet these requirements?Read More →

A company wants to change its internal cloud billing strategy for each of its business units.Currently, the cloud governance team shares reports for overall cloud spending with the head of each business unit.The company uses AWS Organizations to manage the separate AWS accounts for each business unit.The existing tagging standard in Organizations includes the application, environment, and owner.The cloud governance team wants a centralized solution so each business unit receives monthly reports on its cloud spending.The solution should also send notifications for any cloud spending that exceeds a set threshold.Which solution is the MOST cost-effective way to meet these requirements?Read More →

A research company is running daily simulations in the AWS Cloud to meet high demand.The simulations run on several hundred Amazon EC2 instances that are based on Amazon Linux 2.Occasionally, a simulation gets stuck and requires a cloud operations engineer to solve the problem by connecting to an EC2 instance through SSH.Company policy states that no EC2 instance can use the same SSH key and that all connections must be logged in AWS CloudTrail.How can a solutions architect meet these requirements?Read More →

A company has an application that runs on Amazon EC2 instances.A solutions architect is designing VPC infrastructure in an AWS Region where the application needs to access an Amazon Aurora DB Cluster.The EC2 instances are all associated with the same security group.The DB cluster is associated with its own security group.The solutions architect needs to add rules to the security groups to provide the application with least privilege access to the DB Cluster.Which combination of steps will meet these requirements? (Choose two.)Read More →

An enterprise company wants to allow its developers to purchase third-party software through AWS Marketplace.The company uses an AWS Organizations account structure with full features enabled, and has a shared services account in each organizational unit (OU) that will be used by procurement managers.The procurement team’s policy indicates that developers should be able to obtain third-party software from an approved list only and use Private Marketplace in AWSMarketplace to achieve this requirement.The procurement team wants administration of Private Marketplace to be restricted to a role named procurement- manager-role, which could be assumed by procurement managers.Other IAM users, groups, roles, and account administrators in the company should be deniedPrivate Marketplace administrative access.What is the MOST efficient way to design an architecture to meet these requirements?Read More →

A company plans to refactor a monolithic application into a modern application design deployed on AWS.The CI/CD pipeline needs to be upgraded to support the modern design for the application with the following requirements:• It should allow changes to be released several times every hour.• It should be able to roll back the changes as quickly as possible.Which design will meet these requirements?Read More →