Solutions Architect Professional (Page 49)

A company runs an IoT application in the AWS Cloud.The company has millions of sensors that collect data from houses in the United States.The sensors use the MQTT protocol to connect and send data to a custom MQTT broker.The MQTT broker stores the data on a single Amazon EC2 instance.The sensors connect to the broker through the domain named iot.example.com.The company uses Amazon Route 53 as its DNS service.The company stores the data in Amazon DynamoDB.On several occasions, the amount of data has overloaded the MQTT broker and has resulted in lost sensor data.The company must improve the reliability of the solution.Which solution will meet these requirements?Read More →

A retail company has a small ecommerce web application that uses an Amazon RDS for PostgreSQL DB instance.The DB instance is deployed with the Multi-AZ option turned on.Application usage recently increased exponentially, and users experienced frequent HTTP 503 errors.Users reported the errors, and the company’s reputation suffered.The company could not identify a definitive root cause.The company wants to improve its operational readiness and receive alerts before users notice an incident.The company also wants to collect enough information to determine the root cause of any future incident.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using GitHub Actions to run a CI/CD pipeline that accesses resources on AWS.The company has an IAM user that uses a secret key in the pipeline to authenticate to AWS.An existing IAM role with an attached policy grants the required permissions to deploy resources.The company’s security team implements a new requirement that pipelines can no longer use long-lived secret keys.A solutions architect must replace the secret key with a short-lived solution.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using AWS CloudFormation to deploy its infrastructure.The company is concerned that, if a production CloudFormation stack is deleted, important data stored in Amazon RDS databases or Amazon EBS volumes might also be deleted.How can the company prevent users from accidentally deleting data in this way?Read More →

A company manages hundreds of AWS accounts centrally in an organization in AWS Organizations.The company recently started to allow product teams to create and manage their own S3 access points in their accounts.The S3 access points can be accessed only within VPCs, not on the internet.What is the MOST operationally efficient way to enforce this requirement?Read More →

A company wants to use a hybrid cloud architecture between an on-premises data center and AWS.The company already has deployed a multi-account structure in AWS Organizations while following the AWS Well-Architected Framework.Due to strict security requirements, connectivity between the data center and AWS must be encrypted in transit.Only a single entry point into AWS is permitted from the data center.The data center must be able to access all the AWS accounts.Which solution meets these requirements?Read More →

A company operates quick-service restaurants.The restaurants follow a predictable model with high sales traffic for 4 hours daily.Sales traffic is lower outside of those peak hours.The point of sale and management platform is deployed in the AWS Cloud and has a backend that is based on Amazon DynamoDB.The database table uses provisioned throughput mode with 100,000 RCUs and 80,000 WCUs to match known peak resource consumption.The company wants to reduce its DynamoDB cost and minimize the operational overhead for the IT staff.Which solution meets these requirements MOST cost-effectively?Read More →

A Solutions Architect must migrate an existing on-premises web application with 70 TB of static files supporting a public open-data initiative.The Architect wants to upgrade to the latest version of the host operating system as part of the migration effort.Which is the FASTEST and MOST cost-effective way to perform the migration?Read More →

A company is currently in the design phase of an application that will need an RPO of less than 5 minutes and an RTO of less than 10 minutes.The solutions architecture team is forecasting that the database will store approximately 10 TB of data.As part of the design, they are looking for a database solution that will provide the company with the ability to fail over to a secondary Region.Which solution will meet these business requirements at the LOWEST cost?Read More →

A company has a requirement that only allows specially hardened AMIs to be launched into public subnets in a VPC, and for the AMIs to be associated with a specific security group.Allowing non-compliant instances to launch into the public subnet could present a significant security risk if they are allowed to operate.A mapping of approved AMIs to subnets to security groups exists in an Amazon DynamoDB table in the same AWS account.The company created an AWSLambda function that, when invoked, will terminate a given Amazon EC2 instance if the combination of AMI, subnet, and security group are not approved in theDynamoDB table.What should the Solutions Architect do to MOST quickly mitigate the risk of compliance deviations?Read More →