Solutions Architect Professional (Page 70)

A company recently completed a large-scale migration to AWS.Development teams that support various business units have their own accounts in AWSOrganizations.A central cloud team is responsible for controlling which services and resources can be accessed, and for creating operational strategies for all teams within the company.Some teams are approaching their account service quotas.The cloud team needs to create an automated and operationally efficient solution to proactively monitor service quotas.Monitoring should occur every 15 minutes and send alerts when a team exceeds 80% utilization.Which solution will meet these requirements?Read More →

A solutions architect wants to cost-optimize and appropriately size Amazon EC2 instances in a single AWS account.The solutions architect wants to ensure that the instances are optimized based on CPU, memory, and network metrics.Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)Read More →

A financial company needs to create a separate AWS account for a new digital wallet application.The company uses AWS Organizations to manage its accounts.A solutions architect uses the IAM user Support1 from the master account to create a new member account with [email protected] as the email address.What should the solutions architect do to create IAM users in the new member account?Read More →

A company is running a compute workload by using Amazon EC2 Spot Instances that are in an Auto Scaling group.The launch template uses two placement groups and a single instance type.Recently, a monitoring system reported Auto Scaling instance launch failures that correlated with longer wait times for system users.The company needs to improve the overall reliability of the workload.Which solution will meet this requirement?Read More →

A company hosts a blog post application on AWS using Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.The application currently does not useAPI keys to authorize requests.The API model is as follows:GET/posts/[postid] to get post detailsGET/users[userid] to get user detailsGET/comments/[commentid] to get comments detailsThe company has noticed users are actively discussing topics in the comments section, and the company wants to increase user engagement by marking the comments appears in real time.Which design should be used to reduce comment latency and improve user experience?Read More →

A company is running an application that uses an Amazon ElastiCache for Redis cluster as a caching layer.A recent security audit revealed that the company has configured encryption at rest for ElastiCache.However, the company did not configure ElastiCache to use encryption in transit.Additionally, users can access the cache without authentication.A solutions architect must make changes to require user authentication and to ensure that the company is using end-to-end encryption.Which solution will meet these requirements?Read More →

A media company has a static web application that is generated programmatically.The company has a build pipeline that generates HTML content that is uploaded to an Amazon S3 bucket served by Amazon CloudFront.The build pipeline runs inside a Build Account.The S3 bucket and CloudFront distribution are in a Distribution Account.The build pipeline uploads the files to Amazon S3 using an IAM role in the Build Account.The S3 bucket has a bucket policy that only allows CloudFront to read objects using an origin access identity (OAI).During testing all attempts to access the application using the CloudFront URL result in anHTTP 403 Access Denied response.What should a solutions architect suggest to the company to allow access the objects in Amazon S3 through CloudFront?Read More →

A software-as-a-service (SaaS) provider exposes APIs through an Application Load Balancer (ALB).The ALB connects to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that is deployed in the us-east-1 Region.The exposed APIs contain usage of a few non-standard REST methods: LINK, UNLINK, LOCK, and UNLOCK.Users outside the United States are reporting long and inconsistent response times for these APIs.A solutions architect needs to resolve this problem with a solution that minimizes operational overhead.Which solution meets these requirements?Read More →

A company is hosting an image-processing service on AWS in a VPC.The VPC extends across two Availability Zones.Each Availability Zone contains one public subnet and one private subnet.The service runs on Amazon EC2 instances in the private subnets.An Application Load Balancer in the public subnets is in front of the service.The service needs to communicate with the internet and does so through two NAT gateways.The service uses Amazon S3 for image storage.The EC2 instances retrieve approximately 1 ׀¢׀’ of data from an S3 bucket each day.The company has promoted the service as highly secure.A solutions architect must reduce cloud expenditures as much as possible without compromising the service’s security posture or increasing the time spent on ongoing operations.Which solution will meet these requirements?Read More →

A company has a latency-sensitive trading platform that uses Amazon DynamoDB as a storage backend.The company configured the DynamoDB table to use on-demand capacity mode.A solutions architect needs to design a solution to improve the performance of the trading platform.The new solution must ensure high availability for the trading platform.Which solution will meet these requirements with the LEAST latency?Read More →