Solutions Architect Professional (Page 82)

What is the maximum length for an instance profile name in AWS IAM?Read More →

A large company is running a popular web application.The application runs on several Amazon EC2 Linux instances in an Auto Scaling group in a private subnet.An Application Load Balancer is targeting the instances in the Auto Scaling group in the private subnet.AWS Systems Manager Session Manager is configured, and AWS Systems Manager Agent is running on all the EC2 instances.The company recently released a new version of the application.Some EC2 instances are now being marked as unhealthy and are being terminated.As a result, the application is running at reduced capacity.A solutions architect tries to determine the root cause by analyzing Amazon CloudWatch logs that are collected from the application, but the logs are inconclusive.How should the solutions architect gain access to an EC2 instance to troubleshoot the issue?Read More →

You are responsible for a web application that consists of an Elastic Load Balancing (ELB) load balancer in front of an Auto Scaling group of Amazon ElasticCompute Cloud (EC2) instances.For a recent deployment of a new version of the application, a new Amazon Machine Image (AMI) was created, and the AutoScaling group was updated with a new launch configuration that refers to this new AMI.During the deployment, you received complaints from users that the website was responding with errors.All instances passed the ELB health checks.What should you do in order to avoid errors for future deployments? (Choose two.)Read More →

A company wants to deploy an AWS WAF solution to manage AWS WAF rules across multiple AWS accounts.The accounts are managed under different OUs in AWS Organizations.Administrators must be able to add or remove accounts or OUs from managed AWS WAF rule sets as needed.Administrators also must have the ability to automatically update and remediate noncompliant AWS WAF rules in all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

Which is a valid Amazon Resource name (ARN) for IAM?Read More →

A solutions architect is auditing the security setup or an AWS Lambda function for a company.The Lambda function retrieves, the latest changes from an Amazon Aurora database.The Lambda function and the database run in the same VPC.Lambda environment variables are providing the database credentials to the Lambda function.The Lambda function aggregates data and makes the data available in an Amazon S3 bucket that is configured for server-side encryption with AWS KMS managed encryption keys (SSE-KMS).The data must not travel across the Internet.If any database credentials become compromised, the company needs a solution that minimizes the impact of the compromise.What should the solutions architect recommend to meet these requirements?Read More →

Your fortune 500 company has under taken a TCO analysis evaluating the use of Amazon S3 versus acquiring more hardware The outcome was that ail employees would be granted access to use Amazon S3 for storage of their personal documents.Which of the following will you need to consider so you can set up a solution that incorporates single sign-on from your corporate AD or LDAP directory and restricts access for each user to a designated user folder in a bucket? (Choose three.)Read More →

A large mobile gaming company has successfully migrated all of its on-premises infrastructure to the AWS Cloud.A solutions architect is reviewing the environment to ensure that it was built according to the design and that it is running in alignment with the Well-Architected Framework.While reviewing previous monthly costs in Cost Explorer, the solutions architect notices that the creation and subsequent termination of several large instance types account for a high proportion of the costs.The solutions architect finds out that the company’s developers are launching new Amazon EC2 instances as part of their testing and that the developers are not using the appropriate instance types.The solutions architect must implement a control mechanism to limit the instance types that only the developers can launch.Which solution will meet these requirements?Read More →

A company is running a batch analysis every hour on their main transactional DB, running on an RDS MySQL instance, to populate their central Data Warehouse running on Redshift.During the execution of the batch, their transactional applications are very slow.When the batch completes they need to update the top management dashboard with the new data.The dashboard is produced by another system running on-premises that is currently started when a manually-sent email notifies that an update is required.The on-premises system cannot be modified because is managed by another team.How would you optimize this scenario to solve performance issues and automate the process as much as possible?Read More →

A company is developing and hosting several projects in the AWS Cloud.The projects are developed across multiple AWS accounts under the same organization in AWS Organizations.The company requires the cost for cloud infrastructure to be allocated to the owning project.The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation.Which actions should a solutions architect lake to resolve the problem and prevent it from happening in the future? (Choose three.)Read More →