A Developer is creating an Auto Scaling group whose instances need to publish a custom metric to Amazon CloudWatch.
Which method would be the MOST secure way to authenticate a CloudWatch PUT request?

• A.Modify the CloudWatch metric policies to allow the PutMetricData permission to instances from the Auto Scaling group.
• B.Create an IAM user with PutMetricData permission and put the user credentials in a private repository; have applications pull the credentials as needed.
• C.Create an IAM role with PutMetricData permission and modify the Auto Scaling launching configuration to launch instances using that role.
• D.Create an IAM user with PutMetricData permission, and modify the Auto Scaling launch configuration to inject the user credentials into the instance user data.

Comment: *

Name: *

Email: *

Verification: *

A Developer is using AWS CLI, but when running list commands on a large number of resources, it is timing out.
What can be done to avoid this time-out?

• A.Use quoting strings
• B.Use pagination
• C.Use parameter values
• D.Use shorthand syntax

Comment: *

Name: *

Email: *

Verification: *

A Developer created configuration specifications for an AWS Elastic Beanstalk application in a file named healthcheckurl.yaml in the .ebextensions/directory of their application source bundle. The file contains the following:

After the application launches, the health check is not being run on the correct path, event though it is valid.
What can be done to correct this configuration file?

• A.Convert the file to JSON format.
• B.Rename the file to a .config extension.
• C.Change the configuration section from options_settings to resources.
• D.Change the namespace of the option settings to a cusom namespace.

Comment: *

Name: *

Email: *

Verification: *

A current architecture uses many Lambda functions invoking one another as a large state machine. The coordination of this state machine is legacy custom code that breaks easily.
Which AWS Service can help refactor and manage the state machine?

• A.AWS Data Pipeline
• B.AWS SNS with AWS SQS
• C.Amazon Elastic MapReduce
• D.AWS Step Functions

Comment: *

Name: *

Email: *

Verification: *

A company is concerned that a malicious user could deploy unauthorized changes to the code for an AWS Lambda function. What can a developer do to ensure that only trusted code is deployed to Lambda?

• A.Set the KmsKeyArn property of the Lambda function to the Amazon Resource Name (ARN) of a trusted key before deploying the package to Lambda.
• B.Define the code signing configuration in the Lambda console Use AWS Signer to digitally sign the Lambda package before deploying the package to Lambda
• C.Turn on the trusted code option in AWS CodeDeploy. Add the CodeDeploy digital certificate to the Lambda package before deploying the package to Lambda
• D.Link Lambda to AWS Key Management Service (AWS KMS) in the Lambda console. Use AWS KMS to digitally sign the Lambda package before deploying the package to Lambda.

Comment: *

Name: *

Email: *

Verification: *