Solutions Architect Professional (Page 40)

An AWS partner company is building a service in AWS Organizations using its organization named org1.This service requires the partner company to have access to AWS resources in a customer account, which is in a separate organization named org2.The company must establish least privilege security access using an API or command line tool to the customer account.What is the MOST secure way to allow org1 to access resources in org2?Read More →

The two policies that you attach to an IAM role are the access policy and the trust policy.The trust policy identifies who can assume the role and grants the permission in the AWS Lambda account principal by adding the _______ action.Read More →

A company runs a customer service center that accepts calls and automatically sends all customers a managed, interactive, two-way experience survey by text message.The applications that support the customer service center run on machines that the company hosts in an on-premises data center.The hardware that the company uses is old, and the company is experiencing downtime with the system.The company wants to migrate the system to AWS to improve reliability.Which solution will meet these requirements with the LEAST ongoing operational overhead?Read More →

A user has configured EBS volume with PIOPS.The user is not experiencing the optimal throughput.Which of the following could not be factor affecting I/O performance of that EBS volume?Read More →

A solutions architect must update an application environment within AWS Elastic Beanstalk using a blue/green deployment methodology.The solutions architect creates an environment that is identical to the existing application environment and deploys the application to the new environment.What should be done next to complete the update?Read More →

The Statement element, of an AWS IAM policy, contains an array of individual statements.Each individual statement is a(n) _________ block enclosed in braces{ }.Read More →

A company uses an organization in AWS Organizations to manage the company’s AWS accounts.The company uses AWS CloudFormation to deploy all infrastructure.A finance team wants to build a chargeback model.The finance team asked each business unit to tag resources by using a predefined list of project values.When the finance team used the AWS Cost and Usage Report in AWS Cost Explorer and filtered based on project, the team noticed noncompliant project values.The company wants to enforce the use of project tags for new resources.Which solution will meet these requirements with the LEAST effort?Read More →

Doug has created a VPC with CIDR 10.201.0.0/16 in his AWS account.In this VPC he has created a public subnet with CIDR block 10.201.31.0/24.While launching a new EC2 from the console, he is not able to assign the private IP address 10.201.31.6 to this instance.Which is the most likely reason for this issue?Read More →

A company needs to build a disaster recovery (DR) solution for its ecommerce website.The web application is hosted on a fleet of t3.large Amazon EC2 instances and uses an Amazon RDS for MySQL DB instance.The EC2 instances are in an Auto Scaling group that extends across multiple Availability Zones.In the event of a disaster, the web application must fail over to the secondary environment with an RPO of 30 seconds and an RTO of 10 minutes.Which solution will meet these requirements MOST cost-effectively?Read More →

What bandwidths do AWS Direct Connect currently support?Read More →