A development team is creating a new application designed to run on AWS. While the test and production environments will run on Amazon EC2 instances, developers will each run their own environment on their laptops.
Which of the following is the simplest and MOST secure way to access AWS services from the local development machines?

• A.Create an IAM user to be shared with the entire development team, provide the development team with the access key.
• B.Use an IAM role to assume a role and execute API calls using the role.
• C.Create an IAM user for each developer on the team: provide each developer with a unique access key
• D.Set up a federation through an Amazon Cognito user pool.

Comment: *

Name: *

Email: *

Verification: *

A company has 25:000 employees and is growing The company is creating an application that will be accessible to its employees only A developer is using Amazon S3 to store images and Amazon RDS to store application data. The company requires that all employee information remain in the legacy Security Assertion Markup Language (SAML) employee directory only and is not interested in mirroring any employee information on AWS.
How can the developer provide authorized access for the employees who will be using this application so each employee can access their own application data only?

• A.Use an Amazon Cognito identity pool, federate with the SAML provider, and use an IAM condition key with a value for the cognito-identity.amazonaws com sub variable to grant access to the employees.
• B.Create a unique IAM role for each employee and have each employee assume the role to access the application so they can access their personal data only.
• C.Use Amazon Cognito user pools, federate with the SAML provider and use user pool groups with an IAM policy
• D.Use Amazon VPC and keep all resources inside the VPC. and use a VPC link for the S3 bucket with the bucket policy.

Comment: *

Name: *

Email: *

Verification: *

A developer is setting up Amazon API Gateway for their company's products The API will be used by registered developers to query and update their environments. The company wants to limit the amount of requests end users can send for both cost and security reasons Management wants to offer registered developers the option of buying larger packages that allow for more requests.
How can the developer accomplish this with the LEAST amount of overhead management?

• A.Set up Amazon CloudWatch API logging in API Gateway Create a filter based on the user and requestTime fields and create an alarm on this filter Write an AWS Lambda function to analyze the values and requester information, and respond accordingly Set up the function as the target for the alarm If a registered user chooses a larger package, update the Lambda code with the values.
• B.Set up a default usage plan, specify values for the rate and burst capacity, and associate it with a stage, if a registered user chooses a larger package, create a custom plan with the appropriate values and associate the plan with the user
• C.Enable throttling for the API Gateway stage. Set a value for both the rate and burst capacity. If a registered user chooses a larger package, create a stage for them, adjust the values, and share the new URL with them.
• D.Enable Amazon CloudWatch metrics for the API Gateway stage Set up CloudWatch alarms based off the Count metric and the ApiName, Method, Resource, and Stage dimensions to alerts when request rates pass the threshold Set the alarm action to Deny If a registered user chooses a larger package create a user-specific alarm and adjust the values

Comment: *

Name: *

Email: *

Verification: *

Company B provides an online image recognition service and utilizes SQS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?

• A.Set the imaging queue visibility Timeout attribute to 20 seconds
• B.Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
• C.Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
• D.Set the DelaySeconds parameter of a message to 20 seconds

Comment: *

Name: *

Email: *

Verification: *

An application deployed on AWS Elastic Beanstalk experiences increased error rates during deployments of new application versions, resulting in service degradation for users. The Development team believes that this is because of the reduction in capacity during the deployment steps. The team would like to change the deployment policy configuration of the environment to an option that maintains full capacity during deployment while using the existing instances.
Which deployment policy will meet these requirements while using the existing instances?

• A.All at once
• B.Rolling
• C.Rolling with additional batch
• D.Immutable

Comment: *

Name: *

Email: *

Verification: *