Solutions Architect Professional (Page 21)

A company uses Amazon S3 to host a web application.Currently, the company uses a continuous integration tool running on an Amazon EC2 instance that builds and deploys the application by uploading it to an S3 bucket.A Solutions Architect needs to enhance the security of the company’s platform with the following requirements:✑ A build process should be run in a separate account from the account hosting the web application.✑ A build process should have minimal access in the account it operates in.✑ Long-lived credentials should not be used.As a start, the Development team created two AWS accounts: one for the application named web account process; other is a named build account.Which solution should the Solutions Architect use to meet the security requirements?Read More →

A global company has a mobile app that displays ticket barcodes.Customers use the tickets on the mobile app to attend live events.Event scanners read the ticket barcodes and call a backend API to validate the barcode data against data in a database.After the barcode is scanned, the backend logic writes to the database’s single table to mark the barcode as used.The company needs to deploy the app on AWS with a DNS name of api.example.com.The company will host the database in three AWS Regions around the world.Which solution will meet these requirements with the LOWEST latency?Read More →

A company has a web application that securely uploads pictures and videos to an Amazon S3 bucket.The company requires that only authenticated users are allowed to post content.The application generates a presigned URL that is used to upload objects through a browser interface.Most users are reporting slow upload times for objects larger than 100 MB.What can a Solutions Architect do to improve the performance of these uploads while ensuring only authenticated users are allowed to post content?Read More →

A large company is migrating its entire IT portfolio to AWS.Each business unit in the company has a standalone AWS account that supports both development and test environments.New accounts to support production workloads will be needed soon.The finance department requires a centralized method for payment but must maintain visibility into each group’s spending to allocate costs.The security team requires a centralized mechanism to control IAM usage in all the company’s accounts.What combination of the following options meets the company’s needs with the LEAST effort? (Choose two.)Read More →

A company’s CISO has asked a Solutions Architect to re-engineer the company’s current CI/CD practices to make sure patch deployments to its applications can happen as quickly as possible with minimal downtime if vulnerabilities are discovered.The company must also be able to quickly roll back a change in case of errors.The web application is deployed in a fleet of Amazon EC2 instances behind an Application Load Balancer.The company is currently using GitHub to host the application source code, and has configured an AWS CodeBuild project to build the application.The company also intends to use AWS CodePipeline to trigger builds from GitHub commits using the existing CodeBuild project.What CI/CD configuration meets all of the requirements?Read More →

A company has application services that have been containerized and deployed on multiple Amazon EC2 instances with public IPs.An Apache Kafka cluster has been deployed to the EC2 instances.A PostgreSQL database has been migrated to Amazon RDS for PostgreSQL.The company expects a significant increase of orders on its platform when a new version of its flagship product is released.What changes to the current architecture will reduce operational overhead and support the product release?Read More →

A large global financial services company has multiple business units.The company wants to allow Developers to try new services, but there are multiple compliance requirements for different workloads.The Security team is concerned about the access strategy for on-premises and AWS implementations.They would like to enforce governance for AWS services used by business teams for regulatory workloads, including Payment Card Industry (PCI) requirements.Which solution will address the Security team’s concerns and allow the Developers to try new services?Read More →

A company needs to modernize an application and migrate the application to AWS.The application stores user profile data as text in a single table in an on-premises MySQL database.After the modernization, users will use the application to upload video files that are up to 4 GB in size.Other users must be able to download the video files from the application.The company needs a video storage solution that provides rapid scaling.The solution must not affect application performance.Which solution will meet these requirements?Read More →

A company needs to migrate two individual applications from on premises to AWS:• The first application is a legacy custom application that is hosted on a physical Windows server.The application source code is no longer available.The application has little documentation, has hardcoded operating system configuration settings, and is used by an external third party.• The second application is an IBM Db2 database that is hosted on a single Linux VM that uses network-attached storage (NAS) to store the database data.The company uses this database internally for employee records.The applications are hosted in a data center that the company plans to decommission in 90 days.Where possible, the company must use managed AWS services.Which actions for migration should a solutions architect recommend to meet these requirements? (Choose two.)Read More →

A solutions architect must provide a secure way for a team of cloud engineers to use the AWS CLI to upload objects into an Amazon S3 bucket.Each cloud engineer has an IAM user, IAM access keys, and a virtual multi-factor authentication (MFA) device.The IAM users for the cloud engineers are in a group that is named S3-access.The cloud engineers must use MFA to perform any actions in Amazon S3.Which solution will meet these requirements?Read More →