An application is being developed to audit several AWS accounts. The application will run in Account A and must access AWS services in Accounts B and C.
What is the MOST secure way to allow the application to call AWS services in each audited account?

• A.Configure cross-account roles in each audited account. Write code in Account A that assumes those roles
• B.Use S3 cross-region replication to communicate among accounts, with Amazon S3 event notifications to trigger Lambda functions
• C.Deploy an application in each audited account with its own role. Have Account A authenticate with the application
• D.Create an IAM user with an access key in each audited account. Write code in Account A that uses those access keys

Comment: *

Name: *

Email: *

Verification: *

A company has implemented AWS CodePipeline to automate its release pipelines The development team is writing an AWS Lambda function that will send notifications for state changes of each of the actions in the stages.
Which steps must be taken to associate the Lambda function with the event source?

• A.Create a trigger that invokes the Lambda function from the Lambda console by selecting CodePipeline as the event source
• B.Create an Amazon CloudWatch alarm that monitors status changes in CodePipeline and triggers the Lambda function
• C.Create an event trigger and specify the Lambda function from the CodePipeline console.
• D.Create an Amazon CloudWatch Events rule that uses CodePipeline as an event source.

Comment: *

Name: *

Email: *

Verification: *

A Developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:

The Developer needs to create/delete branches.
Which specific IAM permissions need to be added, based on the principle of least privilege?

• A."codecommit:CreateBranch""codecommit:DeleteBranch"
• B."codecommit:Put*"
• C."codecommit:Update*"
• D."codecommit:*"

Comment: *

Name: *

Email: *

Verification: *

A company runs an e-commerce website that uses Amazon DynamoDB where pricing for items is dynamically updated in real time. At any given time, multiple updates may occur simultaneously for pricing information on a particular product. This is causing the original editor's changes to be overwritten without a proper review process.
Which DynamoDB write option should be selected to prevent this overwriting?

• A.Concurrent writes
• B.Conditional writes
• C.Atomic writes
• D.Batch writes

Comment: *

Name: *

Email: *

Verification: *

An Amazon RDS database instance is used by many applications to look up historical data. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users.
What can be done to eliminate the performance impact on application users?

• A.Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.
• B.Create an RDS Read Replica and direct all read traffic to the replica.
• C.Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic.
• D.Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.

Comment: *

Name: *

Email: *

Verification: *