Solutions Architect Professional (Page 54)

A company is running a serverless ecommerce application on AWS.The application uses Amazon API Gateway to invoke AWS Lambda Java functions.The Lambda functions connect to an Amazon RDS for MySQL database to store data.During a recent sale event, a sudden increase in web traffic resulted in poor API performance and database connection failures.The company needs to implement a solution to minimize the latency for the Lambda functions and to support bursts in traffic.Which solution will meet these requirements with the LEAST amount of change to the application?Read More →

A company is running an application in the AWS Cloud.The company’s security team must approve the creation of all new IAM users.When a new IAM user is created, all access for the user must be removed automatically.The security team must then receive a notification to approve the user.The company has a multi-Region AWS CloudTrail trail in the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company plans to migrate many VMs from an on-premises environment to AWS.The company requires an initial assessment of the on-premises environment before the migration, a visualization of the dependencies between applications that run on the VMs, and a report that provides an assessment of the on-premises environment.To get this information, the company has initiated a Migration Evaluator assessment request.The company has the ability to install collector software in its on-premises environment without any constraintsWhich solution will provide the company with the required information with the LEAST operational overhead?Read More →

A company needs to architect a hybrid DNS solution.This solution will use an Amazon Route 53 private hosted zone for the domain cloud.example.com for the resources stored within VPCs.✑ The company has the following DNS resolution requirements:✑ On-premises systems should be able to resolve and connect to cloud.example.com.All VPCs should be able to resolve cloud.example.com.There is already an AWS Direct Connect connection between the on-premises corporate network and AWS Transit Gateway.Which architecture should the company use to meet these requirements with the HIGHEST performance?Read More →

A company recently completed a successful proof of concept of Amazon WorkSpaces.A solutions architect needs to make the solution highly available across two AWS Regions.Amazon WorkSpaces is deployed in a failover Region, and a hosted zone is deployed in Amazon Route 53.What should the solutions architect do to configure high availability for the solution?Read More →

A company has an Amazon S3 bucket that contains millions of unencrypted objects.To comply with a recent security audit, a solutions architect needs to ensure that all objects are encrypted and needs to compile a list of objects that contain sensitive data.Many applications access objects in the S3 bucket, and the development team has limited resources.Which solution will meet these requirements with the LEAST development effort?Read More →

An ecommerce company runs an application on AWS.The application has an Amazon API Gateway API that invokes an AWS Lambda function.The data is stored in an Amazon RDS for PostgreSQL DB instance.During the company’s most recent flash sale, a sudden increase in API calls negatively affected the application’s performance.A solutions architect reviewed the Amazon CloudWatch metrics during that time and noticed a significant increase in Lambda invocations and database connections.The CPU utilization also was high on the DB instance.What should the solutions architect recommend to optimize the application’s performance?Read More →

A company needs to move its write-intensive Amazon RDS for PostgreSQL database from the eu-west-1 Region to the eu-north-1 Region.As part of the migration, the company needs to change from Amazon RDS for PostgreSQL to Amazon Aurora PostgreSQL.The company is using a new AWS account to host a new Aurora PostgreSQL DB cluster.The RDS database is encrypted with an AWS managed AWS Key Management Service (AWS KMS) key.There must be no interruption to applications that use the RDS for PostgreSQL DB instance.Which solution will meet these requirements?Read More →

A company wants to optimize AWS data-transfer costs and compute costs across developer accounts within the company’s organization in AWS Organizations.Developers can configure VPCs and launch Amazon EC2 instances in a single AWS Region.The EC2 instances retrieve approximately 1 TB of data each day from Amazon S3.The developer activity leads to excessive monthly data-transfer charges and NAT gateway processing charges between EC2 instances and S3 buckets, along with high compute costs.The company wants to proactively enforce approved architectural patterns for any EC2 instance and VPC infrastructure that developers deploy within the AWS accounts.The company does not want this enforcement to negatively affect the speed at which the developers can perform their tasks.Which solution will meet these requirements MOST cost-effectively?Read More →

A solutions architect needs to improve an application that is hosted in the AWS Cloud.The application uses an Amazon Aurora MySQL DB instance that is experiencing overloaded connections.Most of the application’s operations insert records into the database.The application currently stores credentials in a text-based configuration file.The solutions architect needs to implement a solution so that the application can handle the current connection load.The solution must keep the credentials secure and must provide the ability to rotate the credentials automatically on a regular basis.Which solution will meet these requirements?Read More →