Solutions Architect Professional (Page 41)

A company uses AWS Organizations to manage its AWS accounts.A solutions architect must design a solution in which only administrator roles are allowed to use IAM actions.However, the solutions architect does not have access to all the AWS accounts throughout the company.Which solution meets these requirements with the LEAST operational overhead?Read More →

Your customer is willing to consolidate their log streams (access logs, application logs, security logs, etc.) in one single system.Once consolidated, the customer wants to analyze these logs in real time based on heuristics.From time to time, the customer needs to validate heuristics, which requires going back to data samples extracted from the last 12 hours.What is the best approach to meet your customer’s requirements?Read More →

A company has hundreds of AWS accounts.The company uses an organization in AWS Organizations to manage all the accounts.The company has turned on all features.A finance team has allocated a daily budget for AWS costs.The finance team must receive an email notification if the organization’s AWS costs exceed 80% of the allocated budget.A solutions architect needs to implement a solution to track the costs and deliver the notifications.Which solution will meet these requirements?Read More →

A newspaper organization has an on-premises application which allows the public to search its back catalogue and retrieve individual newspaper pages via a website written in Java.They have scanned the old newspapers into JPEGs (approx 17TB) and used Optical Character Recognition (OCR) to populate a commercial search product.The hosting platform and software are now end of life and the organization wants to migrate its archive to AWS and produce a cost efficient architecture and still be designed for availability and durability.Which is the most appropriate?Read More →

A company has developed a new release of a popular video game and wants to make it available for public download.The new release package is approximately 5 GB in size.The company provides downloads for existing releases from a Linux-based, publicly facing FTP site hosted in an on-premises data center.The company expects the new release will be downloaded by users worldwide.The company wants a solution that provides improved download performance and low transfer costs, regardless of a user’s location.Read More →

A company has a complex web application that leverages Amazon CloudFront for global scalability and performance.Over time, users report that the web application is slowing down.The company’s operations team reports that the CloudFront cache hit ratio has been dropping steadily.The cache metrics report indicates that query strings on some URLs are inconsistently ordered and are specified sometimes in mixed-case letters and sometimes in lowercase letters.Which set of actions should the solutions architect take to increase the cache hit ratio as quickly possible?Read More →

A company has a web application that uses Amazon API Gateway.AWS Lambda, and Amazon DynamoDB.A recent marketing campaign has increased demand.Monitoring software reports that many requests have significantly longer response times than before the marketing campaign.A solutions architect enabled Amazon CloudWatch Logs for API Gateway and noticed that errors are occurring on 20% of the requests.In CloudWatch, the Lambda function Throttles metric represents 1% of the requests and the Errors metric represents 10% of the requests.Application logs indicate that, when errors occur, there is a call to DynamoDB.What change should the solutions architect make to improve the current response times as the web application becomes more popular?Read More →

You are looking to migrate your Development (Dev) and Test environments to AWS.You have decided to use separate AWS accounts to host each environment.You plan to link each accounts bill to a Master AWS account using Consolidated Billing.To make sure you keep within budget you would like to implement a way for administrators in the Master account to have access to stop, delete and/or terminate resources in both the Dev and Test accounts.Identify which option will allow you to achieve this goal.Read More →

A company needs to improve the security of its web-based application on AWS.The application uses Amazon CloudFront with two custom origins.The first custom origin routes requests to an Amazon API Gateway HTTP API.The second custom origin routes traffic to an Application Load Balancer (ALB).The application integrates with an OpenID Connect (OIDC) identity provider (IdP) for user management.A security audit shows that a JSON Web Token (JWT) authorizer provides access to the API.The security audit also shows that the ALB accepts requests from unauthenticated users.A solutions architect must design a solution to ensure that all backend services respond to only authenticated users.Which solution will meet this requirement?Read More →

To serve Web traffic for a popular product your chief financial officer and IT director have purchased 10 m1.large heavy utilization Reserved Instances (RIs), evenly spread across two availability zones; Route 53 is used to deliver the traffic to an Elastic Load Balancer (ELB).After several months, the product grows even more popular and you need additional capacity.As a result, your company purchases two C3.2xlarge medium utilization Ris.You register the two c3.2xlarge instances with your ELB and quickly find that the m1.large instances are at 100% of capacity and the c3.2xlarge instances have significant capacity that’s unused.Which option is the most cost effective and uses EC2 capacity most effectively?Read More →