A.  

Add an --enable-terminal ion-protection command line option to the create-stack command and the update-stack command.

B.  

Add a -disable-roll back command line option to the create-stack command and the update-stack command

C.  

Add a —parameters ParameterKey=P reserve Resources. ParameterVaIue=True command line option to the create-stack command and the update-stack command.

D.  

Add a -tags Key=PreserveResources.VaIue=True command line option to the create-stack command and the update-stack command.

A.  

Define a maintenance window for the Lambda functions to ensure that the functions get updated copies of the dependencies.

B.  

Upgrade the Lambda functions to the most recent runtime version.

C.  

Define a Lambda layer that contains all of the shared dependencies.

D.  

Use an AWS CodeCommit repository to host the dependencies in a centralized location.

A.  

Create the Lambda function. Configure VPC1 access for the function. Attach a security group named SG1 to both the Lambda function and the database. Configure the security group inbound and outbound rules to allow TCP traffic on Port 3306.

B.  

Create and launch a Lambda function in a new public subnet that is in a new VPC named VPC2. Create a peering connection between VPC1 and VPC2.

C.  

Create the Lambda function. Configure VPC1 access for the function. Assign a security group named SG1 to the Lambda function. Assign a second security group named SG2 to the database. Add an inbound rule to SG1 to allow TCP traffic from Port 3306.

D.  

Export the data from the Aurora database to Amazon S3. Create and launch a Lambda function in VPC1. Configure the Lambda function query the data from Amazon S3.

A.  

Use an AWS Step Functions State machine to monitor API failures. Use the Wait state to delay calling the Lambda function.

B.  

Use an Amazon Simple Queue Service (Amazon SQS) queue to hold the API calls. Configure the Lambda function to poll the queue within the API threshold limits.

C.  

Use an Amazon CloudWatch Logs metric to count the number of API calls. Configure an Amazon CloudWatch alarm flat slops the currently running instance of the Lambda function when the metric exceeds the API threshold limits.

D.  

Use Amazon Kinesis Data Firehose to batch me API calls and deliver them to an Amazon S3 bucket win an event notification to invoke the Lambda function.

A.  

Set up a custom script within the application to randomly select 15% of users. Assign a flag for the new feature to the selected users.

B.  

Create separate AWS AppConfig feature flags for both groups of users. Configure the flags to target 15% of users.

C.  

Create an AWS AppConfig feature flag. Define a variant for the new feature, and create a rule to target 15% of users.

D.  

Use AWS AppConfig to create a feature flag without variants. Implement a custom traffic-splitting mechanism in the application code.

A.  

Store the large pre-trained model in an Amazon S3 bucket. Use the AWS SDK to access the model.

B.  

Create an Amazon EFS file system to store the large pre-trained model. Mount the file system to an Amazon EC2 instance. Configure the Lambda function to use the EFS file system.

C.  

Split the components of the Lambda layer into five new Lambda layers. Zip the new layers, and attach the layers to the Lambda function. Update the function code to use the new layers.

D.  

Create a Docker container that includes the scientific libraries and the pre-trained model. Update the Lambda function to use the container image.

A.  

Use the AWS CLI in AWS CloudShell to browse the CloudWatch Logs log group to search for the error messages.

B.  

Use CloudWatch Logs Insights to run a query on the log group that searches for specific patterns that match the error messages.

C.  

Download log files from the CloudWatch Logs log group to the developer ' s local machine. Use a local text search tool to search for the error messages.

D.  

Export the CloudWatch Logs log group to an Amazon S3 bucket. Use Amazon Athena to run a SQL query against the bucket to search for the error messages.

A.  

Query the instance metadata from http./M69.254.169.254. latestmeta-data/.

B.  

Query the instance user data from http ' 169 254.169 254. latest/user-data/

C.  

Query the Amazon Machine Image (AMI) information from http://169.254.169.254/latest/meta-data/ami/.

D.  

Check the hosts file of the operating system

A.  

Enable response caching in AppSync with a TTL value of 1 hour for all queries. Update the Lambda code to use in-memory caching.

B.  

Increase the Lambda function memory allocation to maximum. Configure provisioned concurrency for the function.

C.  

Create a caching Lambda function that aggregates patient data periodically and stores it in Amazon S3. Implement a read-through cache pattern.

D.  

Implement in-memory caching by using Amazon ElastiCache for frequently-accessed patient records. Configure the Lambda functions to check the cache before querying the database. Set up cache invalidation when patient data is updated.

A.  

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon API Gateway API to invoke the function. Call the API from the client side when login confirmation is received.

B.  

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon Cognito post authentication Lambda trigger for the function.

C.  

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Create an Amazon CloudWatch Logs log subscription filter to invoke the function based on the login status.

D.  

Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose. Create an AWS Lambda function to process the streamed logs and to send the email notification based on the login status of each user.

A.  

Use Amazon DynamoDB Accelerator (DAX) in front of the RDS database to provide a caching layer for the high volume of rapidly changing data

B.  

Set up Amazon S3 Transfer Acceleration on the RDS database to enhance the speed of data transfer from the databases to the application.

C.  

Add an Amazon CloudFront distribution in front of the RDS database to provide a caching layer for the high volume of rapidly changing data

D.  

Create an Amazon ElastiCache for Redis cluster. Update the application code to use a write-through caching strategy and read the data from Redis.

A.  

Use an Application Load Balancer and the X-Forwarded-For headers.

B.  

Use a Network Load Balancer (NLB). Enable proxy protocol support on the NLB and the target application.

C.  

Use an Application Load Balancer. Register the targets by the instance ID.

D.  

Use a Network Load Balancer and the X-Forwarded-For headers.

A.  

Store the API keys as encrypted environment variables by using an AWS KMS key. Configure the execution role of the Lambda function to have permissions to securely decrypt the environment variables at runtime.

B.  

Pass the API keys to the Lambda function by including the keys as URL query parameters in each HTTPS request. Rely on TLS for encryption of the payload and response. Use API Gateway logging controls to manage what query parameters are logged.

C.  

Bundle the API keys inside the minified client-side JavaScript. Configure the web application to call the Lambda function by using an API Gateway HTTP API, cross-origin resource sharing (CORS) restrictions, domain allowlists, and frequent rotation.

D.  

Store the API keys as resource metadata tags on the Lambda function. Configure the Lambda function to read its own tags at startup by using the AWS SDK. Use IAM conditions to control access to the keys when the function retrieves the tags.

A.  

Create security groups in each VPC that allow traffic only from the other fleet’s security group.

B.  

Create an AWS Site-to-Site VPN connection between the two peered VPCs and route the API traffic through the VPN.

C.  

Encrypt all Amazon EBS volumes with a customer managed AWS KMS key and attach an IAM instance profile that allows access to the key.

D.  

Request a certificate through AWS Certificate Manager (ACM) and redeploy both fleets by using TLS for Apache with the ACM-issued certificate.

A.  

Configure the SQS queue as a dead-letter queue for the Lambda function.

B.  

Create code that uses the AWS SDK to call the SQS SendMessage operation to add the invocation details to the SQS queue. Add the code to the end of the Lambda function.

C.  

Add two asynchronous invocation destinations to the Lambda function: one destination for successful invocations and one destination for failed invocations. Configure the SQS queue as the destination for each type. Create an Amazon CloudWatch alarm based on the DestinationDeliveryFailures metric to catch any message that cannot be delivered.

D.  

Add a single asynchronous invocation destination to the Lambda function to capture successful invocations. Configure the SQS queue as the destination. Create an Amazon CloudWatch alarm based on the DestinationDeliveryFailures metric to catch any message that cannot be delivered.

A.  

Create AWS managed keys for all Lambda functions. Use the new AWS managed keys to encrypt the environment variables. Add kms:Decrypt permissions to the Lambda function execution roles.

B.  

Create customer managed keys for all Lambda functions. Use the new customer managed keys to encrypt the environment variables. Add kms:Decrypt permission to the Lambda function execution roles.

C.  

Create customer managed keys for all Lambda functions. Use the new customer managed keys to encrypt the environment variables. Add kms:CreateGrant permission and kms:Encrypt permission to the Lambda function execution roles.

D.  

Create AWS managed keys for all Lambda functions. Use the new AWS managed keys to encrypt the environment variables. Add kms:CreateGrant permission and kms:Encrypt permission to the Lambda function execution roles.

A.  

Amazon S3 managed keys

B.  

Symmetric customer managed keys with key material that is generated by AWS

C.  

Asymmetric customer managed keys with key material that generated by AWS

D.  

Symmetric customer managed keys with imported key material

A.  

Configure the CloudFront cache Update the application to return cached content based upon the default request headers.

B.  

Override the cache method in me selected stage of API Gateway Select the POST method.

C.  

Save the latest request response in Lambda /tmp directory Update the Lambda function to check the /tmp directory

D.  

Save the latest request m AWS Systems Manager Parameter Store Modify the Lambda function to take the latest request response from Parameter Store

A.  

Increase the page size for each request by setting the Limit parameter to be higher than the default value.

B.  

Create a global secondary index (GSI). Set the query attribute to be the partition key of the index.

C.  

Perform a parallel scan operation by issuing individual scan requests.

D.  

Turn on read capacity auto scaling for the DynamoDB table. Increase the maximum read capacity units (RCUs).

A.  

Run an Amazon CloudWatch Logs Insights query with a filter expression after the function finishes running.

B.  

Create an Amazon CloudWatch Logs subscription filter to a new log group. Apply a metric filter for " ERROR. "

C.  

Use the live tail feature in the Lambda console with a filter for " ERROR. "

D.  

Use Amazon Athena to query the log data that is stored in the Amazon CloudWatch log group.

A.  

Create a canary deployment on the existing API stage and test by using the production URL.

B.  

Change the API endpoint type to private and test by using the production URL.

C.  

Create a new API Gateway stage for testing and use stage variables to route traffic to the updated Lambda function.

D.  

Deploy a separate CloudFormation stack that duplicates the production API and Lambda function.

A.  

Modify the CloudFormation stack to set the deletion policy to Retain for the Parameter Store parameters.

B.  

Create an Amazon DynamoDB table as a resource in the CloudFormation stack to hold configuration data for the application Migrate the parameters that the application is modifying from Parameter Store to the DynamoDB table

C.  

Create an Amazon RDS DB instance as a resource in the CloudFormation stack. Create a table in the database for parameter configuration. Migrate the parameters that the application is modifying from Parameter Store to the configuration table

D.  

Modify the CloudFormation stack policy to deny updates on Parameter Store parameters

A.  

Implement a de-duplication mechanism that uses Amazon DynamoDB as the control database. Configure the Lambda function to check for the existence of a unique identifier before processing each event.

B.  

Create a custom Amazon ECS task to perform idempotency checks. Use AWS Step Functions to integrate the ECS task with the Lambda function.

C.  

Configure the Lambda function to retry failed invocations. Implement a retry mechanism that has a fixed delay between attempts to handle duplicate events.

D.  

Use Amazon Athena to query processed events to identify duplicate records. Add processing logic to the Lambda function to handle the duplication scenarios that the query identifies.

A.  

Deploy AWS X-Ray as a sidecar container to the micro services. Update the task role policy to allow access to me X -Ray API.

B.  

Deploy AWS X-Ray as a daemon set to the Fargate cluster. Update the service role policy to allow access to the X-Ray API.

C.  

Instrument the application by using the AWS X-Ray SDK. Update the application to use the Put-XrayTrace API call to communicate with the X-Ray API.

D.  

Instrument the application by using the AWS X-Ray SDK. Update the application to communicate with the X-Ray daemon.

E.  

Instrument the ECS task to send the stout and spider- output to Amazon CloudWatch Logs. Update the task role policy to allow the cloudwatch Putlogs action.

A.  

Create an Amazon Simple Queue Service {Amazon SQS) queue and even! source mapping for each consumer Lambda function. Add message routing logic to the data-processing Lambda function.

B.  

Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the four consumer Lambda functions to the topic. Add message filtering logic to each consumer Lambda function. Subscribe the data-processing Lambda function to the SNS topic.

C.  

Create a separate Amazon Simple Notification Service (Amazon SNS) topic and subscription for each consumer Lambda function. Add message routing logic to the data-processing Lambda function to publish to the appropriate topic.

D.  

Create a single Amazon Simple Notification Service {Amazon SNS) topic. Subscribe the four consumer Lambda functions to the topic. Add SNS subscription filter policies to each subscription. Configure the data-processing Lambda function to publish to the topic.

A.  

Create API Gateway resources and set the integration type value to MOCK Configure the method integration request and integration response to associate a response with an HTTP status code Create an API Gateway stage and deploy the API.

B.  

Create an AWS Lambda function that returns mocked responses and various HTTP status codes. Create API Gateway resources and set the integration type value to AWS_PROXY Deploy the API.

C.  

Create an EC2 application that returns mocked HTTP responses Create API Gateway resources and set the integration type value to AWS Create an API Gateway stage and deploy the API.

D.  

Create API Gateway resources and set the integration type value set to HTTP_PROXY. Add mapping templates and deploy the API. Create an AWS Lambda layer that returns various HTTP status codes Associate the Lambda layer with the API deployment

A.  

Set up an S3 event notification that invokes the removePii function when an S3 GET request is made. Call Amazon S3 by using a GET request to access the object without PII.

B.  

Set up an S3 event notification that invokes the removePii function when an S3 PUT request is made. Call Amazon S3 by using a PUT request to access the object without PII.

C.  

Create an S3 Object Lambda access point from the S3 console. Select the removePii function. Use S3 Access Points to access the object without PII.

D.  

Create an S3 access point from the S3 console. Use the access point name to call the GetObjectLegalHold S3 API function. Pass in the removePii function name to access the object without PII.

A.  

Configure a weighted routing policy in Amazon Route 53. Associate the versions of the Lambda function with the weighted routing policy.

B.  

Create a function alias. Configure the alias to split the traffic between the two versions of the Lambda function.

C.  

Create an Application Load Balancer (ALB) that uses the Lambda function as a target. Configure the ALB to split the traffic between the two versions of the Lambda function.

D.  

Create the new version of the Lambda function as a Lambda layer on the existing version. Configure the function to split the traffic between the two layers.

A.  

Define a development stage on the API Gateway API. Instruct the other developers to point the endpoints to the development stage.

B.  

Define a new API Gateway API that points to the new API application code. Instruct the other developers to point the endpoints to the new API.

C.  

Implement a query parameter in the API application code that determines which code version to call.

D.  

Specify new API Gateway endpoints for the API endpoints that the developer wants to add.

A.  

Configure the DB cluster ' s public access setting to Yes.

B.  

Configure an Amazon RDS database proxy for the Lambda functions.

C.  

Configure a NAT gateway and a security group for the Lambda functions.

D.  

Configure the VPC, subnets, and a security group for the Lambda functions.

A.  

Create an AWS CodeCommt project. Add the repository package ' s build and test commands to the protects buildspec

B.  

Create an AWS CodeBuid project. Add the repository package ' s build and test commands to the projects buildspec

C.  

Create an AWS CodeDeploy protect. Add the repository package ' s build and test commands to the project ' s buildspec

D.  

Add an action to the source stage. Specify the newly created project as the action provider. Specify the build attract as the actions input artifact.

E.  

Add a new stage to the pipeline alter the source stage. Add an action to the new stage. Speedy the newly created protect as the action provider. Specify the source artifact as the action ' s input artifact.

A.  

Create an Amazon Kinesis data stream, and attach it to the DynamoDB table. Create a trigger to connect the data stream to the Lambda function.

B.  

Create an Amazon EventBridge rule to invoke the Lambda function on a regular schedule. Conned to the DynamoDB table from the Lambda function to detect changes.

C.  

Enable DynamoDB Streams on the table. Create a trigger to connect the DynamoDB stream to the Lambda function.

D.  

Create an Amazon Kinesis Data Firehose delivery stream, and attach it to the DynamoDB table. Configure the delivery stream destination as the Lambda function.

A.  

Use a Lambda event filter to allow only refund messages from the SNS topic to invoke the Lambda function.

B.  

Change the Lambda function code to check the received message type. Configure the function to stop processing immediately if the message is not a refund message.

C.  

Use SNS subscription filter policies to allow only refund messages from the topic to invoke the Lambda function.

D.  

Configure the Lambda function to increase the BatchSize parameter and the MaximumBatchingWindowInSeconds parameter. Update the Lambda function code to handle batches of messages.

A.  

Enable S3 Transfer Acceleration on the bucket. Use the appropriate endpoint.

B.  

Call the CreateMultipartUpload API in the Lambda functions to upload the files in pieces.

C.  

Implement the retry with a backoff pattern in the Lambda functions.

D.  

Set up an S3 Lifecycle policy to automatically move the media files to the S3 Intelligent-Tiering storage class.

A.  

The access permissions to the developer ' s AWS CLI binary file have changed.

B.  

The permission set that is assumed by IAM Identity Center does not have the necessary permissions to complete the API call.

C.  

The credentials from the IAM Identity Center federated role have expired.

D.  

The developer is attempting to make API calls to the incorrect AWS account.

A.  

Use AWS CodeDeploy with AWS CloudFormation StackSets to deploy the infrastructure. Use Amazon CodeGuru to run the tests.

B.  

Use AWS CodePipeline with AWS CloudFormation StackSets to deploy the infrastructure. Use AWS CodeBuild to run the tests.

C.  

Use AWS CodePipeline with AWS CloudFormation change sets to deploy the infrastructure. Use a CloudFormation custom resource to run the tests.

D.  

Use AWS Serverless Application Model (AWS SAM) templates with AWS CloudFormation change sets to deploy the infrastructure. Use AWS CodeDeploy to run the tests.

A.  

Run the amplify add test command in the Amplify CLI.

B.  

Create unit tests in the application. Deploy the unit tests by using the amplify push command in the Amplify CLI.

C.  

Add a test phase to the amplify.yml build settings for the application.

D.  

Add a test phase to the aws-exports.js file for the application.

A.  

Store the secret in AWS Secrets Manager. Reference the secret in the env section of the buildspec.yml file by using secrets-manager. Grant the CodeBuild IAM role least-privilege access.

B.  

Store the secret in an encrypted Amazon S3 bucket and download it during the build.

C.  

Store the secret in AWS Systems Manager Parameter Store and reference it in the env section by using parameter-store.

D.  

Retrieve the parameter manually in a pre-build phase and mask it in the build logs.

A.  

Disable application-level DNS caching.

B.  

Enable application-level DNS caching.

C.  

Enable application pooling.

D.  

Disable application pooling.

A.  

Increase the reserved concurrency of the Lambda function.

B.  

Increase the timeout of the Lambda function.

C.  

Increase the timeout of the API Gateway integration.

D.  

Increase the per-client throttling limit.

A.  

The file must be a JSON-formatted file named appspec.json.

B.  

The file must be a YAML-formatted file named appspec.yml.

C.  

The file must be stored in AWS CodeBuild and referenced from the application ' s source code.

D.  

The file must be placed in the root of the directory structure of the application ' s source code.

E.  

The file must be stored in Amazon S3 and referenced from the application ' s source code.

A.  

Amazon CloudWatch Logs log groups that use the default log format for Lambda functions. Route each invocation to the appropriate log group by using a Lambda canary deployment and weighted aliases. Set the appropriate log group as the target for each function.

B.  

Set up an S3 bucket as an on-failure destination for the Lambda function. Configure an Amazon SNS topic as the destination for successful Lambda function invocations.

C.  

Configure an Amazon SQS dead-letter queue as an event source for the Lambda function to store failed invocations. In the Lambda function code, use the PutItem Amazon DynamoDB API call to add the successful invocation information to the database.

D.  

Set up an Amazon SQS queue as an on-failure destination for the Lambda function. Configure an Amazon OpenSearch Service cluster as the destination for the Lambda function for successful invocations.

A.  

Create shareable test Lambda events. Use these test Lambda events for local testing.

B.  

Store manually created test event payloads locally. Use the sam local invoke command with the file path to the payloads.

C.  

Store manually created test event payloads in an Amazon S3 bucket. Use the sam local invoke command with the S3 path to the payloads.

D.  

Use the sam local generate-event command to create test payloads for local testing.

A.  

Configure reserved concurrency for the critical Lambda function. Set reserved concurrent executions to the appropriate level.

B.  

Configure provisioned concurrency for the critical Lambda function. Set provisioned concurrent executions to the appropriate level.

C.  

Configure CloudWatch alarms for TooManyRequestsException errors. Add the critical Lambda function as an alarm state change action to invoke the critical function again after a failure.

D.  

Configure CloudWatch alarms for TooManyRequestsException errors. Add Amazon EventBridge as an action for the alarm state change. Use EventBridge to invoke the critical function again after a failure.

A.  

Set up a custom script within the application to randomly select 15% of users. Assign a flag for the new feature to the selected users.

B.  

Create separate AWS AppConfig feature flags for both groups of users. Configure the flags to target 15% of users.

C.  

Create an AWS AppConfig feature flag. Define a variant for the new feature, and create a rule to target 15% of users.

D.  

Use AWS AppConfig to create a feature flag without variants. Implement a custom traffic splitting mechanism in the application code.

A.  

Add an UnmaskConfig property to the Operation property of the data protection policy. Specify the role that the fraud detection account must assume.

B.  

Add the logs:Unmask permission to the IAM role that the fraud detection account must assume.

C.  

Add the data protection policy to the CloudWatch log group that captures logs for the HTTP API.

D.  

Add the data protection policy to the CloudWatch log group in the account that hosts the application.

E.  

Add the data protection policy to the IAM role that the fraud detection account must assume.

A.  

Configure an S3 event notification to invoke the Lambda function when a branch office uploads a sales report.

B.  

Create an AWS Step Functions state machine that invokes the Lambda function once each day at the predefined time.

C.  

Configure the Lambda function to run continuously and to begin analysis only at the predefined time each day.

D.  

Create an Amazon EventBridge scheduled rule that invokes the Lambda function once each day at the predefined time.

A.  

Define a resource-based policy on the S3 bucket to deny access when a request meets the condition " aws:SecureTransport " : " false " .

B.  

Define a resource-based policy on the S3 bucket to allow access when a request meets the condition " aws:SecureTransport " : " false " .

C.  

Define a role-based policy on the other accounts ' roles to deny access when a request meets the condition " aws:SecureTransport " : " false " .

D.  

Define a resource-based policy on the KMS key to deny access when a request meets the condition " aws:SecureTransport " : " false " .

A.  

Create an Amazon Cognito user pool. Configure the user pool to allow unauthenticated users. Exchange user tokens for temporary credentials that allow authenticated users to assume a role.

B.  

Create an Amazon Cognito identity pool. Configure the identity pool to allow unauthenticated users. Exchange unique identity for temporary credentials that allow all users to assume a role.

C.  

Create an Amazon CloudFront distribution. Configure the distribution to allow unauthenticated users. Exchange user tokens for temporary credentials that allow all users to assume a role.

D.  

Create a role for authenticated users that allows access to all content. Create a role for unauthenticated users that allows access to only the sample content.

E.  

Allow all users to access the sample content by default. Create a role for authenticated users that allows access to the other content.

A.  

Add a policy to the SQS queue that enforces the aws:SecureTransport condition.

B.  

Configure the microservices to enable server-side encryption (SSE) within the message payloads.

C.  

Enable server-side encryption (SSE) on the Amazon SQS queue and include the sensitive information in the message body.

D.  

Transmit the sensitive information as message attributes instead of the message body.

A.  

Create a composite primary key. Set the user ID as the partition key and the timestamp as the sort key.

B.  

Create a composite primary key. Set the product ID as the partition key and the associated actions as the sort key.

C.  

Use the product ID as the partition key. Create an Application Auto Scaling policy to update the table’s provisioned throughput when the table exceeds its capacity usage target.

D.  

Create an AWS Lambda function that adds a counter attribute that increases by one for each new record. Use the counter attribute as the partition key.

A.  

Refactor the Lambda function into two functions. Configure one function to transform the data and one function to load the data into the DynamoDB table. Create an Amazon Simple Queue Service (Amazon SQS) queue in between the functions to hold the items as messages and to invoke the second function.

B.  

Turn on auto scaling for the DynamoDB table. Use Amazon CloudWatch to monitor the table ' s read and write capacity metrics and to track consumed capacity.

C.  

Create an alias for the Lambda function. Configure provisioned concurrency for the application to use.

D.  

Refactor the Lambda function into two functions. Configure one function to store the data in the DynamoDB table. Configure the second function to process the data and update the items after the data is stored in DynamoDB. Create a DynamoDB stream to invoke the second function after the data isstored.

A.  

A global secondary index (GSl) with Product ID as the partition key and Product Rating as the sort key

B.  

A global secondary index (GSl) with Product ID as the partition key and Review ID as the sort key

C.  

A local secondary index (LSI) with Product ID as the partition key and Product Rating as the sort key

D.  

A local secondary index (LSI) with Review ID as the partition key and Product ID as the sort key

A.  

Retrieve the AWS CloudTrail events for the resource mysql-db where the event name is DeleteDBInstance. Inspect each event.

B.  

Retrieve the Amazon CloudWatch log events from the most recent log stream within the rds/mysql-db log group. Inspect the log events.

C.  

Retrieve the AWS X-Ray trace summaries. Filter by services with the name mysql-db. Inspect the ErrorRootCauses values within each summary.

D.  

Retrieve the AWS Systems Manager deletions inventory. Filter the inventory by deletions that have a TypeName value of RDS. Inspect the deletion details.

A.  

Package each Python library in its own .zip file archive. Deploy each Lambda function with its own copy of the library.

B.  

Create a Lambda layer with the required Python library. Use the Lambda layer in both Lambda functions.

C.  

Combine the two Lambda functions into one Lambda function. Deploy the Lambda function as a single .zip file archive.

D.  

Download the Python library to an S3 bucket. Program the Lambda functions to reference the object URLs.

A.  

Create two pod specifications. Make one to include the application container and the other to include the other container. Link the two pods together.

B.  

Create two task definitions. Make one to include the application container and the other to include the other container. Mount a shared volume between the two tasks.

C.  

Create one task definition. Specify both containers in the definition. Mount a shared volume between those two containers.

D.  

Create a single pod specification. Include both containers in the specification. Mount a persistent volume to both containers.

A.  

Increase the number of shards of the Kinesis data stream.

B.  

Decrease the timeout of the Lambda function.

C.  

Increase the memory that is allocated to the Lambda function.

D.  

Decrease the number of shards of the Kinesis data stream.

E.  

Increase the timeout of the Lambda function.

A.  

Change the API Gateway route to add an X-Amz-Invocation-Type header win a sialic value of ' Event ' in the integration request Deploy the API Gateway stage to apply the changes.

B.  

Change the configuration of the Lambda function that implements the request to process a file. Configure the maximum age of the event so that the Lambda function will ion asynchronously.

C.  

Change the API Gateway timeout value to match the Lambda function ominous value. Deploy the API Gateway stage to apply the changes.

D.  

Change the API Gateway route to add an X-Amz-Target header with a static value of ' A sync ' in the integration request Deploy me API Gateway stage to apply the changes.

A.  

Use the TestState API to invoke only the HTTP Task. Set the inspection level to TRACE.

B.  

Use the TestState API to invoke the state machine. Set the inspection level to DEBUG.

C.  

Use the data flow simulator to invoke only the HTTP Task. View the request and response data.

D.  

Change the log level of the state machine to ALL. Run the state machine.

A.  

Create a custom Amazon CloudWatch alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

B.  

Create a custom AWS CloudTrail alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

C.  

Create a cron job on the EC2 instance that invokes the --describe-instance-information command on the host instance every 15 minutes and sends the results to an Amazon SNS topic.

D.  

Create an AWS Lambda function that queries the AWS CloudTrail logs for the CPUUtilization metric every 15 minutes and sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

A.  

Use S3 Event Notifications to validate the file upload and download requests and update the user interface (UI).

B.  

Save the details of the uploaded files in a separate Amazon DynamoDB table. Filter the list of files in the user interface (UI) by comparing the current user ID with the user ID associated with the file in the table.

C.  

Use Amazon API Gateway and an AWS Lambda function to upload and download files. Validate each request in the Lambda function before performing the requested operation.

D.  

Use an IAM policy within the Amazon Cognito identity prefix to restrict users to use their own folders in Amazon S3.

A.  

Configure AWS Secrets Manager versions to store different copies of the same credentials across multiple environments

B.  

Create a new parameter version in AWS Systems Manager Parameter Store for each environment Store the environment-specific credentials in the parameter version.

C.  

Configure the environment variables in the application code Use different names for each environment type

D.  

Configure AWS Secrets Manager to create a new secret for each environment type. Store the environment-specific credentials in the secret

A.  

Create an AWS Lambda function to run an Amazon EventBridge job on a schedule to scan the DynamoDB table for old items and to delete them.

B.  

Archive old data in an Amazon S3 bucket. Set up an S3 Lifecycle policy to transition old data to a more cost-effective storage class.

C.  

Set a TTL attribute for the telemetry data. Activate TTL on the DynamoDB table.

D.  

Change the table to on-demand capacity mode.

A.  

Warm standby

B.  

Pilot light

C.  

Backup and restore

D.  

Multi-site active-active

A.  

Copy the documents to a separate S3 bucket that has a lifecycle policy for deletion after 15 minutes.

B.  

Create a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes.

C.  

Use server-side encryption with AWS KMS managed keys (SSE-KMS) and download the documents using HTTPS.

D.  

Modify the S3 bucket policy to only allow specific users to download the documents. Revert the change after 15 minutes.

A.  

Use an AWS SDK to query the logs from Amazon CloudWatch.

B.  

Export the log data for a specific time range to an Amazon S3 bucket. Use Amazon Athena to query the S3 bucket.

C.  

Use Amazon CloudWatch Logs Insights to query log groups for the Lambda functions. Filter on the request IDs.

D.  

Use Amazon CloudWatch Live Tail to examine log groups for both Lambda functions, and check for the error.

A.  

Write the files to Amazon S3 Glacier Deep Archive. Add the S3 location of the files to the SQS queue.

B.  

Write the files to Amazon S3 Standard. Add the S3 location of the files to the SQS queue.

C.  

Write the files to an Amazon Elastic Block Store (Amazon EBS) General Purpose SSD volume. Add the EBS location of the files to the SQS queue.

D.  

Write messages that contain the contents of the uploaded files to the SQS queue.

A.  

Configure an Amazon Simple Queue Service (Amazon SQS) queue to contain messages about each step a function must perform. Configure the Lambda functions to run sequentially based on the order of messages in the SQS queue.

B.  

Configure an Amazon Simple Notification Service (Amazon SNS) topic to contain notifications about each step a function must perform. Subscribe the Lambda functions to the SNS topic. Use subscription filters based on the step each function must perform.

C.  

Configure an AWS Step Functions state machine to invoke the Lambda functions in a specific order.

D.  

Configure Amazon EventBridge Scheduler schedules to invoke the Lambda functions in a specific order.

A.  

Manually instrument the X-Ray SDK in the application code.

B.  

Use the X-Ray auto-instrumentation agent.

C.  

Use Amazon Macie to detect and hide PII. Call the X-Ray API from AWS Lambda.

D.  

Use AWS Distro for Open Telemetry.

A.  

Create an Amazon Route 53 geolocation routing policy.

B.  

Duplicate content in multiple AWS Regions by using S3 Cross-Region Replication.

C.  

Use S3 Intelligent-Tiering to move data based on access patterns.

D.  

Create an Amazon CloudFront distribution with Amazon S3 as an origin.

A.  

Provision an elastic network interface for the new Lambda function.

B.  

Provision a NAT gateway in a public subnet in the VPC.

C.  

Provision an outbound rule for the new Lambda function ' s security group to grant internet access.

D.  

Provision a gateway VPC endpoint in a public subnet in the VPC.

A.  

Write the encrypted key from the GenerateDataKey API to disk for later use. Use the plaintext key from the GenerateDataKey API and a symmetric encryption algorithm to encrypt the file.

B.  

Write the plain text key from the GenerateDataKey API to disk for later use. Use the encrypted key from the GenerateDataKey API and a symmetric encryption algorithm to encrypt the file.

C.  

Write the encrypted key from the GenerateDataKey API to disk for later use. Use the plaintext key from the GenerateDataKey API to encrypt the file by using the KMS Encrypt API

D.  

Write the plain text key from the GenerateDataKey API to disk for later use. Use the encrypted key from the GenerateDataKey API to encrypt the file by using the KMS Encrypt API

A.  

Increase the virtual CPU (vCPU) cores quota of the Lambda function.

B.  

Increase the amount of memory that is allocated to the Lambda function.

C.  

Increase the ephemeral storage size of the Lambda function.

D.  

Increase the timeout value of the Lambda function.

A.  

Use an Amazon Cognito identity pool to generate temporary AWS credentials that are linked to an unauthenticated role that has access to the required resources.

B.  

Set up an IAM user that has permissions to the required resources. Hardcode the IAM credentials in the web and mobile application.

C.  

Generate temporary keys that are stored in AWS KMS. Use the temporary keys to access the required resources.

D.  

Generate temporary credentials. Store the temporary credentials in AWS Secrets Manager. Use the temporary credentials to access the required resources.

A.  

Configure S3 Object Lock to update to the latest version of the files every time an S3 object is updated.

B.  

Configure the S3 bucket to clear all old objects from the bucket before new artifacts are uploaded.

C.  

Set CloudFront to invalidate the cache after the artifacts have been deployed to Amazon S3.

D.  

Set CloudFront to modify the distribution origin after the artifacts have been deployed to Amazon S3.

A.  

Attach the CloudWatchAgentAdminPolicy managed IAM policy to the IAM role that is associated with the EC2 instance profile. Provision a NAT gateway in a public subnet.

B.  

Add a user data script to install and start up the CloudWatch agent automatically when the EC2 instances are first booted up.

C.  

Attach the CloudWatchAgentServerPolicy managed IAM policy to the IAM role that is associated with the EC2 instance profile. Provision a VPC interface endpoint for CloudWatch.

D.  

Attach the CloudWatchReadOnlyAccess managed IAM policy to the IAM role that is associated with the EC2 instance profile. Provision a VPC interface endpoint for CloudWatch.

A.  

Download the AWS X-Ray daemon. Install the daemon on an EC2 instance. Ensure that the EC2 instance allows UDP traffic on port 2000.

B.  

Configure an interface VPC endpoint to allow traffic to reach the global AWS X-Ray daemon on TCP port 2000.

C.  

Enable AWS X-Ray. Configure Amazon CloudWatch to push logs to X-Ray.

D.  

Add the AWS X-Ray software development kit (SDK) to the microservices. Use X-Ray to trace requests that each microservice makes.

E.  

Set up Amazon CloudWatch metric streams to collect streaming data from the microservices.

A.  

Store the Root CA Cert as a secret in AWS Secrets Manager. Create a resource-based policy. Add IAM users to allow access to the secret

B.  

Store the Root CA Cert as a Secure Sting parameter in aws Systems Manager Parameter Store Create a resource-based policy. Add IAM users to allow access to the policy.

C.  

Store the Root CA Cert in an Amazon S3 bucket. Create a resource- based policy to allow access to the bucket.

D.  

Refactor the Lambda code to load the Root CA Cert from the Root CA Certs location. Modify the runtime trust store inside the Lambda function handler.

E.  

Refactor the Lambda code to load the Root CA Cert from the Root CA Cert ' s location. Modify the runtime trust store outside the Lambda function handler.

A.  

Deploy an Amazon EC2 instance based on Linux, and edit its /etc/confab file by adding a command to periodically invoke the lambda function

B.  

Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.

C.  

Create an Amazon EventBridge rule that runs on a regular schedule to invoke the Lambda function.

D.  

Create an Amazon Simple Notification Service (Amazon SNS) topic that has a subscription to the Lambda function with a 600-second timer.

A.  

Package the application code into a .zip file. Use the AWS Management Console to upload the .zip file and deploy the packaged application.

B.  

Package the application code into a .tar file. Use the AWS Management Console to create a new application version from the .tar file. Update the environment by using the AWS CLI.

C.  

Package the application code into a .tar file. Use the AWS Management Console to upload the .tar file and deploy the packaged application.

D.  

Package the application code into a .zip file. Use the AWS CLI to create a new application version from the .zip file and to update the environment.

E.  

Package the application code into a .zip file. Use the AWS Management Console to create a new application version from the .zip file. Rebuild the environment by using the AWS CLI.

A.  

Contact AWS Support to report an issue with the Auto Scaling Groups (ASG > service.

B.  

Add a DependsOn attribute to the ASGInstanceRole12345678 resource in the CloudFormation template. Then delete the stack.

C.  

Modify the CloudFormation template to retain the ASGInstanceRolet 2345678 resource. Then manually delete the resource after deployment.

D.  

Add a force parameter when calling CloudFormation with the role-am of ASGInstanceRole12345678.

A.  

Grant the Lambda execution role permission to write logs to Amazon CloudWatch Logs.

B.  

Enable CloudWatch Lambda Insights and redeploy the function.

C.  

Enable AWS X-Ray active tracing for the function.

D.  

Add CloudWatch as a trusted identity in the Lambda execution role.

A.  

Configure the application to retrieve database credentials from the secret in the primary Region.

B.  

Replicate the secret to the secondary Region and configure the application to retrieve credentials from the replica secret.

C.  

Replicate the secret and promote the replica to a standalone secret.

D.  

Store the database endpoint and credentials as a secret and connect to the secret.

E.  

Store credentials in environment variables in the secondary Region.

A.  

Migrate the function to Amazon EKS.

B.  

Increase the maximum age of events in Lambda.

C.  

Increase the function’s reserved concurrency.

D.  

Add the lambda:GetFunctionConcurrency action to the execution role.

E.  

Request a service quota change for increased concurrency.

A.  

Create an SOS FIFO queue. Enable message deduplication on the SOS FIFO queue.

B.  

Reduce the maximum Lambda concurrency that the SOS queue can invoke.

C.  

Use Lambda ' s temporary storage to keep track of processed message identifiers.

D.  

Configure a message group ID for every sent message. Enable message deduplication on the SQS standard queue.

A.  

Increase the SQS event source ' s batch size setting.

B.  

Configure provisioned concurrency for the Lambda function based on the third-party API ' s documented rate limits.

C.  

Increase the retry attempts and maximum event age in the Lambda function ' s asynchronous configuration.

D.  

Configure maximum concurrency on the SQS event source based on the third-party service ' s documented rate limits.

A.  

Configure the integration request mapping template with Content-Type of text/html and statusCode of 200. Configure the integration response mapping template with Content-Type of application/json. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

B.  

Configure the Integration request mapping template with Content-Type of application/json. In the integration request mapping template, include the LandingPage HMTL code that references the APIs. Configure the integration response mapping template with Content-Type of text/html and statusCode of 200.

C.  

Configure the integration request mapping template with Content-Type of application/json and statusCode of 200. Configure the integration response mapping template with Content-Type of text/html. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

D.  

Configure the integration request mapping template with Content-Type of text/html. In the integration request mapping template, include the LandingPage HTML code that references the APIs. Configure the integration response mapping template with Content-Type of application/json and statusCode of 200.

A.  

Integrate the client with an API Gateway WebSocket API. Save the user-uploaded files with the WebSocket connection ID. Push the validation status to the connection ID when the processing is complete to initiate an update of the UI.

B.  

Launch an Amazon EC2 micro instance, and set up a WebSocket server. Send the user-uploaded file and user detail to the EC2 instance after the user uploads the file. Use the WebSocket server to send updates to the UI when the uploaded file is processed.

C.  

Save the user ' s email address along with the user-uploaded file. When the validation process is complete, send an email notification through Amazon SNS to the user who uploaded the file.

D.  

Save the user-uploaded file and user detail to Amazon DynamoDB. Use Amazon DynamoDB Streams with Amazon SNS push notifications to send updates to the browser to update the UI.

A.  

Call the GetItem operation first to confirm that the record does not exist. Then call PutItem.

B.  

Enable the TTL attribute on the DynamoDB table.

C.  

Implement a conditional put by using the attribute_exists(transactionID) condition expression.

D.  

Implement a conditional put by using the attribute_not_exists(transactionID) condition expression.

A.  

Improves legibility and systolic convention

B.  

Takes advantage of runtime environment reuse

C.  

Provides better error handling

D.  

Creates a new SDK instance for each invocation

A.  

Install the Kinesis Producer Library {KPL) to ingest data into the data stream.

B.  

Switch to on-demand capacity mode for the data stream. Specify a partition key when writing data to the data stream.

C.  

Decrease the amount of time that data is kept in the data stream by using the DecreaseStreamRetention Period API operation.

D.  

Increase the shard count in the data stream by using the UpdateShardCount API operation.

A.  

Event driven

B.  

Client-server d riven

C.  

Fan-out driven

D.  

Schedule driven

A.  

The command is incorrect; it should be rewritten to use put-item with a string argument

B.  

The developer needs to log a ticket with AWS Support to enable access to the demoman-table

C.  

Amazon DynamoOB cannot be accessed from the AWS CLI and needs to called via the REST API

D.  

The IAM user needs an associated policy with read access to demoman-table

A.  

Create and store the test events in Amazon S3 as JSON objects. Allow S3 bucket access to all 1AM users.

B.  

Create the test events. Configure the event sharing settings to make the test events shareable.

C.  

Create and store the test events in Amazon DynamoDB. Allow access to DynamoDB by using 1AM roles.

D.  

Create the test events. Configure the event sharing settings to make the test events private.

A.  

Generate a presigned URL when a picture is uploaded. Save the URL in an Amazon DynamoDB table. Return the URL to the browser when the employee logs in.

B.  

Save the picture ' s S3 key in an Amazon DynamoDB table. Create an Amazon S3 VPC endpoint to allow the employees to download pictures once they log in.

C.  

Encode a picture using base64. Save the base64 string in an Amazon DynamoDB table. Allow the browser to retrieve the string and convert it to a picture.

D.  

Save the picture ' s S3 key in an Amazon DynamoDB table. Use a function to generate a presigned URL every time an employee logs in. Return the URL to the browser.

A.  

Configure an AWS CloudTrail log file delivery to an Amazon S3 bucket. Create an Amazon CloudWatch alarm for the GetSecretValue. Secrets Manager API operation requests

B.  

Create a secrets manager-secret-unused AWS Config managed rule. Create an Amazon EventBridge rule to Initiate notification when the AWS Config managed rule is met.

C.  

Deactivate the applications secrets and monitor the applications error logs temporarily.

D.  

Configure AWS X-Ray for the applications. Create a sampling rule lo match the GetSecretValue Secrets Manager API operation requests.

A.  

Use Amazon Athena to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bject/Personal finding type.

B.  

Use Amazon Made to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bject/Financial finding type.

C.  

Use Amazon Made to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bject/Personal finding type.

D.  

Use Amazon Athena to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bject/Financial finding type.

A.  

Create an Amazon EventBridge rule Configure the rule with a pattern to match the S3 object created event

B.  

Schedule an Amazon EventBridge rule to run a new Lambda function to scan the S3 bucket.

C.  

Add a trigger to the existing Lambda function. Set the trigger type to EventBridge Select the Amazon EventBridge rule.

D.  

Create a new Lambda function to scan the S3 bucket for recently added S3 objects

E.  

Add S3 Lifecycle rules to invoke the existing Lambda function

A.  

AWS CloudTrail

B.  

AWS Trusted Advisor

C.  

Amazon VPC Flow Logs

D.  

Network access control lists

E.  

AWS Config rules

A.  

Create an Amazon RDS instance, then implement session handling at the application level to leverage a database inside the RDS database instance for session data storage.

B.  

Implement a shared file system solution across the underlying Amazon EC2 instances, then implement session handling at the application level to leverage the shared file system for session data storage.

C.  

Create an Amazon ElastiCache (Memcached) cluster, then implement session handling at the application level to leverage the cluster for session data storage.

D.  

Create an Amazon DynamoDB table, then implement session handling at the application level to leverage the table for session data storage.

A.  

CloudFront distributions can be created only in the us-east-1 Region.

B.  

Lambda@Edge functions can be created only in the us-east-1 Region.

C.  

A single AWS SAM template cannot contain multiple Lambda functions.

D.  

The CloudFront distribution and the S3 bucket cannot be created in the same Region.

A.  

Create a global secondary index (GSI). Use Location as the partition key and RegistrationDate as the sort key. Use the Query operation to retrieve the specified users.

B.  

Use the Scan operation to retrieve the specified users. Use a filter expression for a value in the RegistrationDate column that is greater than the date required by the application.

C.  

Create a local secondary index (LSI). Use Location as the partition key and RegistrationDate as the sort key. Use the Query operation to retrieve the specified users.

D.  

Use the BatchGetItem operation with a filter on the RegistrationDate column for a value that is greater than the required date to retrieve the specified users.

A.  

Create a resource-based policy for the CloudFront distribution. Configure the policy to allow access to the function URL.

B.  

Configure a resource-based policy for the Lambda function to allow only the CloudFront distribution to access the function URL. Configure the distribution to use an origin access control (OAC) for requests to the function URL.

C.  

Create an IAM role that has permissions to invoke the function URL. Configure a service role that has a CloudFront trust policy and permissions to make requests to the function URL.

D.  

Configure a resource-based policy for the Lambda function to allow only the CloudFront distribution ' s IP address range to access the function.

A.  

In the CodePipeline pipeline, implement an AWS CodeDeploy action for each Region to deploy and test the Cloud Formation templates. Update CodePipeline and AWS CodeBuild with appropriate permissions.

B.  

Configure CodePipeline to deploy and test the Cloud Formation templates. Use CloudFormation StackSets to start deployment across both Regions.

C.  

Configure CodePipeline to invoke AWS CodeBuild to deploy and test the CloudFormation templates in each Region. Update CodeBuild and CloudFormation with appropriate permissions.

D.  

Use the Snyk action in CodePipeline to deploy and test the CloudFormation templates in each Region.

A.  

Configure the Redis client to use an exponential backoff retry strategy to establish cache connections.

B.  

Store the scores in the application ' s memory. Perform bulk set operations on the scores that are stored in memory.

C.  

Configure the Redis client in the application to persist connections to the cluster by implementing a connection pool.

D.  

Deploy more nodes in the ElastiCache cluster. Update the Redis client to discover the new nodes.

A.  

Use AWS KMS t0 encrypt traffic between cloudFront and the web application.

B.  

Set the Origin Protocol Policy to " HTTPS Only " .

C.  

Set the Origin’s HTTP Port to 443.

D.  

Set the Viewer Protocol Policy to " HTTPS Only " or Redirect HTTP to HTTPS "

E.  

Enable the CloudFront option Restrict Viewer Access.

A.  

Use AWS CodeBuild with custom scripts for unit tests and Amazon CodeGuru Reviewer for code reviews.

B.  

Use Amazon CodeGuru for code reviews and a custom Lambda-based solution for unit tests.

C.  

Use AWS CodeBuild for tests and rely on manual pull request reviews.

D.  

Use Amazon Q Developer Pro to generate unit tests and perform code reviews directly in the IDE.

A.  

Check whether the policy that is assigned to the JAM role that is attached to the EC2 instances grants access to Amazon S3.

B.  

Check the S3 bucket policy to validate the access permissions for the S3 bucket.

C.  

Check whether the policy that is assigned to the 1AM user that is attached to the EC2 instances grants access to Amazon S3.

D.  

Check the S3 Lifecycle policy to validate the permissions that are assigned to the S3 bucket.

E.  

Check the security groups that are assigned to the EC2 instances. Make sure that a rule is not blocking the access to Amazon S3.

A.  

Rotate the secret by using the alternating-users rotation strategy. Update the application with an appropriate retry strategy to handle authentication failures.

B.  

Use the PostgreSQL client to create a new database username and password. Include the new secret values by performing an immediate rotation. Use the AWS CLI to update the RDS database password. Perform an immediate rotation of the Secrets Manager secrets.

C.  

Rotate the secret by using multivalue answer rotation. Update the application with an appropriate retry strategy to handle authentication failures.

D.  

Rotate the secret by using the single-user rotation strategy. Update the application with an appropriate retry strategy to handle authentication failures.

A.  

Attach an Amazon EBS volume that is larger than 1 GB to the Lambda function. Copy the files from the S3 bucket to the EBS volume.

B.  

Attach an Elastic Network Adapter (ENA) to the Lambda function. Use the ENA to read the video files from the S3 bucket.

C.  

Increase the ephemeral storage size to 2 GB. Copy the files from the S3 bucket to the /tmp directory of the Lambda function.

D.  

Configure the Lambda function code to read the video files directly from the S3 bucket.

A.  

A read-through cache

B.  

A write-behind cache

C.  

A lazy-loading cache

D.  

A write-through cache

A.  

Configure auto-scaling for the DynamoDB table with a target utilization of 70%. Set the minimum and maximum capacity units based on the expected workload.

B.  

Use DynamoDB on-demand capacity mode for the table. Specify a maximum throughput higher than the expected peak read and write capacity units.

C.  

Use DynamoDB provisioned throughput mode for the table. Create an Amazon CloudWatch alarm on the ThrottledRequests metric. Invoke an AWS Lambda function to increase provisioned capacity.

D.  

Create an Amazon DynamoDB Accelerator (DAX) cluster. Configure the application to use the DAX endpoint.

A.  

Enable AWS X-Ray tracing for the Lambda function and DocumentDB cluster. Implement custom subsegments to track query execution to identify slow-performing queries.

B.  

Add Amazon CloudWatch Logs error streaming. Create custom CloudWatch metrics based on the logs. Create a CloudWatch dashboard that shows Lambda metrics.

C.  

Modify the Lambda function to use DocumentDB connection pooling. Implement async/await patterns for database operations.

D.  

Add logging statements within the Lambda function to output query execution times and database connection attempts. Store IDs in Amazon CloudWatch Logs. Use CloudWatch Logs Insights to analyze the logs.

A.  

Create an AWS Lambda function that runs in the same VPC as the API application. Configure the function as an EventBridge target. Use the function to send events to the API.

B.  

Create an internet-facing Application Load Balancer (ALB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the ALB as an EventBridge target.

C.  

Create an internet-facing Network Load Balancer (NLB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the NLB as an EventBridge target.

D.  

Use the application API endpoint in the VPC as a target for EventBridge. Send events directly to the application API endpoint from EventBridge.

A.  

Export the existing API to an OpenAPI file. Create a new API Import the OpenAPI file Modify the new API to add request validation. Perform the tests Modify the existing API to add request validation. Deploy the existing API to production.

B.  

Modify the existing API to add request validation. Deploy the updated API to a new API Gateway stage Perform the tests Deploy the updated API to the API Gateway production stage.

C.  

Create a new API Add the necessary resources and methods including new request validation. Perform the tests Modify the existing API to add request validation. Deploy the existing API to production.

D.  

Clone the exiting API Modify the new API lo add request validation. Perform the tests Modify the existing API to add request validation Deploy the existing API to production.

A.  

Use AWS Secrets Manager to manage and store the configuration data. Integrate Secrets Manager with a custom AWS Config rule that has remediation actions to track changes in the application and to roll back any bad configuration changes.

B.  

Use AWS Secrets Manager to manage and store the configuration data. Integrate Secrets Manager with a custom AWS Config rule. Attach a custom AWS Systems Manager document to the rule that automatically rolls back any bad configuration changes.

C.  

Use AWS AppConfig to manage and store the configuration data. Integrate AWS AppConfig with Amazon CloudWatch to monitor changes to the application. Set up an alarm to automatically roll back any bad configuration changes.

D.  

Use AWS AppConfig to manage and store the configuration data. Integrate AWS AppConfig with Amazon CloudWatch to monitor changes to the application. Set up CloudWatch Application Signals to roll back any bad configuration changes.

A.  

Configure secret replication for each secret. Add us-east-1 as a replication Region. Choose an AWS KMS key in us-east-1 to encrypt the replicated secrets.

B.  

Create a new secret in us-east-1 for each secret. Configure secret replication in us-east-1. Set the source to be the corresponding secret in us-west-1. Choose an AWS KMS key in us-west-1 to encrypt the replicated secrets.

C.  

Create a replication rule for each secret. Set us-east-1 as the destination Region. Configure the rule to run during secret rotation. Choose an AWS KMS key in us-east-1 to encrypt the replicated secrets.

D.  

Create a Secrets Manager lifecycle rule to replicate each secret to a new Amazon S3 bucket in us-west-1. Configure an S3 replication rule to replicate the secrets to us-east-1.

A.  

Update the policy of the IAM user to allow the s3:EncryptionConfiguration action.

B.  

Update the bucket policy of the S3 bucket to allow the IAM user to upload objects.

C.  

Update the policy of the IAM user to allow the kms:GenerateDataKey action.

D.  

Update the ACL of the S3 bucket to allow the IAM user to upload objects.

A.  

Increase the memory configuration of the Lambda function

B.  

Increase the visibility timeout on the SQS queue

C.  

Increase the instance size of the host that runs the Lambda function.

D.  

Use multi-threading for the conversion.

A.  

Store the credentials in AWS Systems Manager Parameter Store. Select the database that the parameter will access. Use the default AWS Key Management Service (AWS KMS) key to encrypt the parameter. Enable automatic rotation for the parameter. Use the parameter from Parameter Store on the Lambda function to connect to the database.

B.  

Encrypt the credentials with the default AWS Key Management Service (AWS KMS) key. Store the credentials as environment variables for the Lambda function. Create a second Lambda function to generate new credentials and to rotate the credentials by updating the environment variables of the first Lambda function. Invoke the second Lambda function by using an Amazon EventBridge rule that runs on a schedule. Update the database to use the new c

C.  

Store the credentials in AWS Secrets Manager. Set the secret type to Credentials for Amazon RDS database. Select the database that the secret will access. Use the default AWS Key Management Service (AWS KMS) key to encrypt the secret. Enable automatic rotation for the secret. Use the secret from Secrets Manager on the Lambda function to connect to the database.

D.  

Encrypt the credentials by using AWS Key Management Service (AWS KMS). Store the credentials in an Amazon DynamoDB table. Create a second Lambda function to rotate the credentials. Invoke the second Lambda function by using an Amazon EventBridge rule that runs on a schedule. Update the DynamoDB table. Update the database to use the generated credentials. Retrieve the credentials from DynamoDB with the first Lambda function. Connect to the d

A.  

" Condition " : { " ArnLike " : { " aws " : " arn:aws:states:ap-south-1:111111111111:stateMachine " } }

B.  

" Condition " : { " ArnLike " : { " aws " : " arn:aws:states:ap-south-1:*:stateMachine " } }

A.  

Enable SSL connections to Kinesis.

B.  

Use Amazon Kinesis Consumer Library.

C.  

Encrypt the data once it is at rest with a Lambda function.

D.  

Enable server-side encryption in Kinesis Data Streams.

A.  

Obtain the request identifier from the AWS request ID field in the context object. Configure the application to write logs to standard output.

B.  

Obtain the request identifier from the AWS request ID field in the event object. Configure the application to write logs to a file.

C.  

Obtain the request identifier from the AWS request ID field in the event object. Configure the application to write logs to standard output.

D.  

Obtain the request identifier from the AWS request ID field in the context object. Configure the application to write logs to a file.

A.  

Implement Kinesis Data Firehose data transformation as an AWS Lambda function. Configure the function to remove the customer identifiers. Set an Amazon S3 bucket as the destination of the delivery stream.

B.  

Launch an Amazon EC2 instance. Set the EC2 instance as the destination of the delivery stream. Run an application on the EC2 instance to remove the customer identifiers. Store the transformed data in an Amazon S3 bucket.

C.  

Create an Amazon OpenSearch Service instance. Set the OpenSearch Service instance as the destination of the delivery stream. Use search and replace to remove the customer identifiers. Export the data to an Amazon S3 bucket.

D.  

Create an AWS Step Functions workflow to remove the customer identifiers. As the last step in the workflow, store the transformed data in an Amazon S3 bucket. Set the workflow as the destination of the delivery stream.

A.  

Store the API keys as encrypted environment variables by using an AWS KMS key. Configure the execution role of the Lambda function to have permissions to securely decrypt the environment variables at runtime.

B.  

Pass the API keys to the Lambda function by including the keys as URL query parameters in each HTTPS request.

C.  

Bundle the API keys inside the minified client-side JavaScript.

D.  

Store the API keys as resource metadata tags on the Lambda function. Configure the Lambda function to read its own tags at startup by using the AWS SDK.

A.  

In the central AWS CDK application, write a handler function in the code that uses AWS SDK calls to check for and delete unused resources. Create an AWS CloudPormation template from a JSON file. Use the template to attach the function code to an AWS Lambda function and lo invoke the Lambda function when the deployment slack runs.

B.  

In the central AWS CDK application. write a handler function in the code that uses AWS SDK calls to check for and delete unused resources. Create an AWS CDK custom resource Use the custom resource to attach the function code to an AWS Lambda function and to invoke the Lambda function when the deployment stack runs.

C.  

In the central AWS CDK, write a handler function m the code that uses AWS SDK calls to check for and delete unused resources. Create an API in AWS Amplify Use the API to attach the function code to an AWS Lambda function and to invoke the Lambda function when the deployment stack runs.

D.  

In the AWS Lambda console write a handler function in the code that uses AWS SDK calls to check for and delete unused resources. Create an AWS CDK custom resource. Use the custom resource to import the Lambda function into the stack and to Invoke the Lambda function when the deployment stack runs.

A.  

Enable AWS X-Ray active tracing in the Lambda function Review the logs in X-Ray

B.  

Configure AWS CloudTrail View the trail logs that are associated with the Lambda function.

C.  

Review the AWS Config logs in Amazon Cloud Watch.

D.  

Review the Amazon CloudWatch logs that are associated with the Lambda function.

A.  

Create a security group in each VPC that allows traffic only from the other fleet ' s security group. Assign each security group to the corresponding instances.

B.  

Create an AWS Site-to-Site VPN connection between the two peered VPCs. Pass the sensitive data in the API calls through the Site-to-Site VPN connection.

C.  

Create a customer managed key in AWS KMS to encrypt all EBS volumes. Create an IAM instance profile that has permission to use the customer managed key and attach the key to all instances in both fleets.

D.  

Request a valid certificate through AWS Certificate Manager (ACM) and redeploy both fleets as AWS Nitro Enclaves. Use the ACM for Nitro Enclaves Amazon Machine Image (AMI) and specify the requested certificate for all instances.

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

A.  

Create an event with Amazon EventBridge that will monitor the S3 bucket and then insert the records into DynamoDB.

B.  

Configure an S3 event to invoke an AWS Lambda function that inserts records into DynamoD

B.  

C.  

Create an AWS Lambda function that will poll the S3 bucket and then insert the records into DynamoDB.

D.  

Create a cron job that will run at a scheduled time and insert the records into DynamoDB.

A.  

Create a DynamoDB global secondary index (GSI) on the table. Use CustomerID as the partition key. Use the specified CustomerID value to run a query on the table.

B.  

Create a DynamoDB global secondary index (GSI) on the table. Use CustomerID as the sort key. Use a filter expression to perform a scan operation on the table to match on the specified CustomerID value.

C.  

Create a DynamoDB local secondary index (LSI) on the table. Use CustomerID as the sort key. Run a PartiQL query on the table with a SELECT statement where CustomerID equals the specified CustomerID value.

D.  

Create a DynamoDB local secondary index (LSI) on the table. Use CustomerID as the partition key. Use the specified CustomerID value to run a query on the table.

A.  

Configure Amazon S3 events to invoke the Lambda function when each file is uploaded. Log processed transaction IDs to Amazon DynamoDB.

B.  

Move the application logic to a single Amazon EC2 instance to handle processing more effectively.

C.  

Use Amazon EventBridge Scheduler to run the Lambda function every 5 minutes to scan the S3 bucket.

D.  

Poll the Amazon S3 bucket continuously by using the Lambda function and each object ' s LastModified timestamp.

A.  

Configure a Lambda event filter to allow only refund messages to invoke the function.

B.  

Add logic in the Lambda function to ignore non-refund messages.

C.  

Use Amazon SNS subscription filter policies to deliver only refund messages to the Lambda function.

D.  

Increase batch size and batching window parameters for the Lambda function.

A.  

Log instrumentation output into an Amazon SQS queue.

B.  

Use a visualization tool to view application traces.

C.  

Instrument application code using the AWS SDK.

D.  

Install the X-Ray agent on the application servers.

E.  

Create an Amazon DynamoDB table to store the trace logs.

A.  

Add the permission to the IAM role. Terminate the EC2 instance and launch a new instance.

B.  

Add the permission to the IAM role so that the change takes effect automatically.

C.  

Add the permission to the IAM role. Hibernate and restart the EC2 instance.

D.  

Add the permission to the S3 bucket and restart the EC2 instance.

A.  

Configure an Amazon SQS queue to contain messages about each step that a Lambda function must perform. Configure the Lambda functions to run sequentially based on the order of messages in the SQS queue.

B.  

Configure an Amazon SNS topic to contain notifications about each step that a Lambda function must perform. Subscribe the Lambda functions to the SNS topic. Use subscription filters based on the step that each Lambda function must perform.

C.  

Configure an AWS Step Functions state machine to invoke the Lambda functions in a specific order.

D.  

Configure Amazon EventBridge Scheduler schedules to invoke the Lambda functions in a specific order.

A.  

All at once

B.  

Rolling with additional batch

C.  

Bluegreen

D.  

Immutable

A.  

Change the StreamViewType parameter value to NEW_AND_OLOJMAGES for the DynamoDB table.

B.  

Configure event source mapping for the Lambda function.

C.  

Map an Amazon Simple Notification Service (Amazon SNS) topic to the DynamoDB streams.

D.  

Increase the maximum runtime (timeout) setting of the Lambda function.

A.  

Remove the code that calls the STS AssumeRole operation. Use the same access key and secret key from the server to access the S3 bucket.

B.  

Remove the access key and the secret key. Use the STS AssumeRole operation to add permissions to access the S3 bucket.

C.  

Remove the access key, the secret key, and the code that calls the STS AssumeRole operation. Use an IAM instance profile role that grants access to the S3 bucket.

D.  

Remove the access key, the secret key, and the code that calls the STS AssumeRole operation. Create a new access key and secret key. Use the new keys to access the S3 bucket.

A.  

Select the appropriate log group. Create a CloudWatch metric filter with " ERROR " as the search term. Create an alarm on this metric that notifies the SNS topic when the metric is 1 or higher.

B.  

In CloudWatch Logs Insights, select the appropriate log group. Create a metric query to search for the term " ERROR " in the logs. Create an alarm on this metric that notifies the SNS topic when the metric is 1 or higher.

C.  

Select the appropriate log group. Create an SNS subscription filter with " ERROR " as the filter pattern. Select the SNS topic as the destination.

D.  

Create a CloudWatch alarm that includes " ERROR " as a filter pattern, a log group dimension that defines the appropriate log group, and a destination that notifies the SNS topic.

A.  

Configure the Lambda function to use AWS KMS keys with the AWS Database Encryption SDK to encrypt the patient data before sending the data to DynamoDB.

B.  

Use AWS managed AWS KMS keys to encrypt the data in the DynamoDB table.

C.  

Configure a DynamoDB stream on the table to invoke a Lambda function. Configure the Lambda function to use an AWS KMS key to encrypt the DynamoDB table and to update the table.

D.  

Use an AWS Step Functions workflow to transfer the data to an Amazon SQS queue. Configure a Lambda function to encrypt the data in the queue before sending the data to the DynamoDB table.

A.  

Use AWS CodeDeploy to deploy the function code

B.  

Use Lambda layers to package and load dependencies.

C.  

Increase the memory size of the function.

D.  

Use Amazon S3 to host the function dependencies

A.  

Configure the Lambda function to use AWS KMS keys with the AWS Database Encryption SDK to encrypt the patient data before sending the data to DynamoDB.

B.  

Use AWS managed AWS KMS keys to encrypt the data in the DynamoDB table.

C.  

Configure a DynamoDB stream on the table to invoke a Lambda function. Configure the Lambda function use an AWS KMS key to encrypt the DynamoDB table and to update the table.

D.  

Use an AWS Step Functions workflow to transfer the data to an Amazon SQS queue. Configure a Lambda function to encrypt the data in the queue before sending the data to the DynamoDB table.

A.  

Write an S3 bucket policy to allow only encrypted connections over HTTPS by using permissions boundary.

B.  

Configure an S3 bucket policy to enable client-side encryption for the objects containing personal data by using an AWS KMS customer managed key

C.  

Configure the application to encrypt the objects by using an AWS KMS customer managed key before uploading the objects containing personal data to Amazon S3.

D.  

Write an S3 bucket policy to allow only encrypted connections over HTTPS by using the aws:SecureTransport condition.

E.  

Configure S3 Block Public Access settings for the S3 bucket to allow only encrypted connections over HTTPS.

A.  

Update the condition expression section of the request to check whether the status attribute equals " Inactive " before making the update request.

B.  

Update the condition expression section of the request to check whether the email attribute exists in the item before making the update request.

C.  

Include error-handling logic in the Lambda function to retry the update operation when a ConditionalCheckFailedException error occurs.

D.  

Update the condition expression in the request to check whether the email address is in the expected format before making the update request.

A.  

Configure the CloudFormation template to reference the API endpoint in the DefinitionSubstitutions property for the AWS StepFunctions StateMachme resource.

B.  

Configure the CloudFormation template to store the API endpoint in an environment variable for the AWS::StepFunctions::StateMachine resourc Configure the state machine to reference the environment variable

C.  

Configure the CloudFormation template to store the API endpoint in a standard AWS: SecretsManager Secret resource Configure the state machine to reference the resource

D.  

Configure the CloudFormation template to store the API endpoint in a standard AWS::AppConfig;:ConfigurationProfile resource Configure the state machine to referencethe resource.

A.  

Create an Amazon EventBridge rule to invoke the function every 5 minutes and scan for new objects.

B.  

Create an S3 event notification to invoke the function when a new object is created in the S3 bucket.

C.  

Create an S3 event notification that publishes a message to an Amazon SNS topic. Subscribe the function to the SNS topic.

D.  

Create an S3 event notification that adds a message to an Amazon SQS queue. Configure the function to poll the queue.

A.  

Enable AWS X-Ray on the Lambda function. In the generated trace map. select the line between Lambda and Amazon S3.

B.  

Query the Lambda function ' s log file in Amazon CloudWatch Logs Insights. Return the average of the auto-discovered ©duration field.

C.  

Enable CloudWatch Lambda Insights on the function. View the latency graph that CloudWatch Lambda Insights provides.

D.  

Enable AWS X-Ray on the Lambda function. Select Amazon S3 in the latency graph to view the latency histogram.

A.  

Store the files in an Amazon S3 bucket Use the S3 Glacier Instant Retrieval storage class Create an S3 Lifecycle policy to transition the files to the S3 Glacier Deep Archive storage class after 1 year

B.  

Store the files in an Amazon S3 bucket. Use the S3 Standard storage class. Create an S3 Lifecycle policy to transition the files to the S3 Glacier Flexible Retrieval storage class after 1 year.

C.  

Store the files on an Amazon Elastic Block Store (Amazon EBS) volume Use Amazon Data Lifecycle Manager (Amazon DLM) to create snapshots of the EBS volumes and to store those snapshots in Amazon S3

D.  

Store the files on an Amazon Elastic File System (Amazon EFS) mount. Configure EFS lifecycle management to transition the files to the EFS Standard-Infrequent Access (Standard-IA) storage class after 1 year.

A.  

Create a feature flag configuration profile in AWS AppSync.

B.  

Store prerelease data in DynamoDB and toggle visibility by using DynamoDB Streams.

C.  

Create a feature flag configuration profile in AWS AppConfig . Activate and deactivate feature flags as needed.

D.  

Store prerelease data in AWS Amplify DataStore and toggle visibility through synchronization.

A.  

Amazon S3 with encrypted files prefixed with “config”

B.  

AWS Secrets Manager secrets with a tag that is named SecretString

C.  

AWS Systems Manager Parameter Store SecureString parameters

D.  

CloudFormation NoEcho parameters

A.  

Configure the Amazon CloudWatch agent to push logs to Amazon CloudWatch Logs by using port 443.

B.  

Configure the Elastic Beanstalk .ebextensions directory to track the memory usage of the instances.

C.  

Configure the Amazon CloudWatch agent to track the memory usage of the instances.

D.  

Configure an Amazon CloudWatch dashboard to track the memory usage of the instances.

A.  

sam deploy -force-upload

B.  

sam deploy -no-execute-changeset

C.  

sam package

D.  

sam sync -watch

A.  

Use S3 Batch Operations to invoke an AWS Lambda function to create new variants of the photos with the required dimensions and resolutions. Create a dynamic CloudFront origin that automatically maps the request of each device to the corresponding photo variant.

B.  

Use S3 Batch Operations to invoke an AWS Lambda function to create new variants of the photos with the required dimensions and resolutions. Create a Lambda@Edge function to route requests to the corresponding photo vacant by using request headers.

C.  

Create a Lambda@Edge function that optimizes the photos upon request and returns the photos as a response. Change the CloudFront TTL cache policy to the maximum value possible.

D.  

Create a Lambda@Edge function that optimizes the photos upon request and returns the photos as a response. In the same function store a copy of the processed photos on Amazon S3 for subsequent requests.

A.  

Use the AWS SAM CLI to package and deploy the SAM application to the pre-production AWS account. Specify the debug parameter.

B.  

Use the AWS SAM CLI to package and create a change set against the pre-production AWS account. Execute the change set in a new AWS account designated for a development environment.

C.  

Use the AWS SAM CLI to package and deploy the SAM application to a new AWS account designated for a development environment.

D.  

Update the CloudFormation stack in the pre-production account. Add a separate stage that points to a new AWS account designated for a development environment.

A.  

Create a Lambda layer to store the external library Configure the Lambda function to use the layer

B.  

Create an Amazon S3 bucket Upload the external library into the S3 bucket. Mount the S3 bucket folder in the Lambda function Import the library by using the proper folder in the mount point.

C.  

Load the external library to the Lambda function ' s /tmp directory during deployment of the Lambda package. Import the library from the /tmp directory.

D.  

Create an Amazon Elastic File System (Amazon EFS) volume. Upload the external library to the EFS volume Mount the EFS volume in the Lambda function. Import the library by using the proper folder in the mount point.

A.  

Use sticky sessions with an Elastic Load Balancer target group.

B.  

Use Amazon SOS to save session data.

C.  

Use Amazon DynamoDB to perform scalable session handling.

D.  

Use Elastic Load Balancer connection draining to stop sending requests to failing instances.

A.  

Create and store the secrets in AWS KMS. Configure AWS KMS to automatically rotate the secrets every 6 months.

B.  

Create and store the secrets in AWS Certificate Manager (ACM). Choose the appropriate certificate type. Set up the rotation period of the certificate to be every 6 months.

C.  

Create and store the secrets in Amazon EventBridge. Configure a RotateKey event in EventBridge to rotate the secrets every 6 months.

D.  

Create and store the secrets in AWS Secrets Manager. Choose the appropriate secret type. Turn on automatic rotation. Set the rotation schedule to every 6 months.

A.  

Increase the cooldown period of the Auto Scaling group from its default value.

B.  

Update the lifecycle hook to wait for the application to install.

C.  

Update the Auto Scaling group’s health check from Amazon EC2 to Elastic Load Balancing (ELB).

D.  

Set the health check grace period for the Auto Scaling group.

A.  

Put the sensitive data into a CloudFormation parameter. Encrypt the CloudFormation templates by using an AWS Key Management Service (AWS KMS) key.

B.  

Put the sensitive data into an Amazon S3 bucket Update the CloudFormation templates to download the object from Amazon S3 during bootslrap.

C.  

Put the sensitive data into AWS Systems Manager Parameter Store as a secure string parameter. Update the CloudFormation templates to use dynamic references to specify template values.

D.  

Put the sensitive data into Amazon Elastic File System (Amazon EPS) Enforce EFS encryption after file system creation. Update the CloudFormation templates to retrieve data from Amazon EFS.

A.  

Encrypt the environment variables by using AWS Secrets Manager. Set up automatic rotation in Secrets Manager.

B.  

Encrypt the environment variables by using AWS Key Management Service (AWS KMS) customer managed keys. Enable automatic key rotation.

C.  

Encrypt the environment variables by using AWS Key Management Service (AWS KMS) AWS managed keys. Configure a custom AWS Lambda function to automate key rotation.

D.  

Encrypt the environment variables by using AWS Systems Manager Parameter Store. Set up automatic rotation in Parameter Store.

A.  

Load the S3 objects into Amazon Redshift by using a COPY command. Implement dynamic data masking. Refactor the analytics service to read from Amazon Redshift.

B.  

Set up an S3 Object Lambda function. Attach the function to an S3 Object Lambda Access Point. Program the function to call a PII redaction API.

C.  

Use AWS KMS to implement encryption in the S3 bucket. Re-upload all the existing S3 objects. Give the kms:Decrypt permission to the analytics service.

D.  

Create an Amazon SNS topic. Implement message data protection. Refactor the analytics service to publish data access requests to the SNS topic.

A.  

Configure multiple CodeBuild projects and manually split tests across them.

B.  

Configure CodeBuild to split tests across multiple parallel compute environments.

C.  

Run all tests sequentially in a single CodeBuild environment.

D.  

Use Amazon EC2 instances with a custom test runner to distribute tests.

A.  

Transfer the data from the NFS share to an Amazon EBS volume. Upload the container images to Amazon ECR.

B.  

Transfer the data from the NFS share to an Amazon EFS file system. Upload the container images to Amazon ECR.

C.  

Create an Amazon ECS cluster and configure each node to mount the Amazon EBS volume.

D.  

Create an Amazon EKS cluster and configure each node to mount the Amazon EBS volume.

E.  

Create an Amazon EKS cluster and configure each node to mount the Amazon EFS file system.

A.  

Create an 1AM role that has administrative access to AWS. Attach the role to the EC2 instance.

B.  

Create an 1AM user. Attach the AdministratorAccess policy. Copy the generated access key and secret key. Within the application code, use the access key and secret key along with the AWS SDK to communicate with Amazon S3.

C.  

Create an 1AM role that has the necessary access to Amazon S3. Attach the role to the EC2 instance.

D.  

Create an 1AM user. Attach a policy that provides the necessary access to Amazon S3. Copy the generated access key and secret key. Within the application code, use the access key and secret key along with the AWS SDK to communicate with Amazon S3.

A.  

Use Amazon Cognito user pools to manage user accounts. Create an Amazon Cognito user pool authorizer in API Gateway to control access to the API. Use the Lambda function to store the photos and details in the DynamoDB table. Retrieve previously uploaded photos directly from the DynamoDB table.

B.  

Use Amazon Cognito user pools to manage user accounts. Create an Amazon Cognito user pool authorizer in API Gateway to control access to the API. Use the Lambda function to store the photos in Amazon S3. Store the object ' s S3 key as part of the photo details in the DynamoDB table. Retrieve previously uploaded photos by querying DynamoDB for the S3 key.

C.  

Create an IAM user for each user of the application during the sign-up process. Use IAM authentication to access the API Gateway API. Use the Lambda function to store the photos in Amazon S3. Store the object ' s S3 key as part of the photo details in the DynamoDB table. Retrieve previously uploaded photos by querying DynamoDB for the S3 key.

D.  

Create a users table in DynamoDB. Use the table to manage user accounts. Create a Lambda authorizer that validates user credentials against the users table. Integrate the Lambda authorizer with API Gateway to control access to the API. Use the Lambda function to store the photos in Amazon S3. Store the object ' s S3 key as par of the photo details in the DynamoDB table. Retrieve previously uploaded photos by querying DynamoDB for the S3 key

A.  

Create an AWS Lambda function that removes any objects in the S3 bucket that have the basic/ prefix and are more than 90 days old. Set up an Amazon EventBridge schedule to invoke the Lambda function every day.

B.  

Set up an S3 Lifecycle rule that applies to the objects that have the premium/ prefix. Set the S3 Lifecycle rule action to expire the current version of the objects that have the premium/ prefix after 90 days.

C.  

Set up an S3 Lifecycle rule that applies to the objects that have the basic/ prefix. Set the S3 Lifecycle rule action to expire the current version of the objects that have the basic/ prefix after 90 days.

D.  

Create a rule for the S3 bucket to identify objects that have the basic/ prefix. Set the rule action to delete any objects that have object delete markers and unfinished multipart uploads after 90 days.

A.  

Upload the video files to the Amazon EFS Standard storage class for the first 90 days. After 90 days, transition the video files to the EFS Standard-Infrequent Access (Standard-IA) storage class.

B.  

Upload the video files to Amazon S3. Use the S3 Glacier Deep Archive storage class for the first 90 days. After 90 days, transition the video files to the S3 Glacier Flexible Retrieval storage class.

C.  

Use Amazon EBS to store the video files for the first 90 days. After 90 days, transition the video files to the Amazon S3 Glacier Deep Archive storage class.

D.  

Upload the video files to Amazon S3. Use the S3 Glacier Instant Retrieval storage class for the first 90 days. After 90 days, transition the video files to the S3 Glacier Flexible Retrieval storage class.

A.  

Attach the existing 1AM policy to the Lambda function.

B.  

Create an 1AM role for the Lambda function Attach the existing 1AM policy to the role Attach the role to the Lambda function

C.  

Create an 1AM user with programmatic access Attach the existing 1AM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.

D.  

Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function