A company is developing a new online game that will run on top of Amazon ECS. Four distinct Amazon ECS services will be part of the architecture, each requiring specific permissions to various AWS services. The company wants to optimize the use of the underlying Amazon EC2 instances by bin packing the containers based on memory reservation.
Which configuration would allow the Development team to meet these requirements MOST securely?

• A.Create a new Identity and Access Management (IAM) instance profile containing the required permissions for the various ECS services, then associate that instance role with the underlying EC2 instances.
• B.Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS service to reference the associated IAM role.
• C.Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then, create an IAM group and configure the ECS cluster to reference that group.
• D.Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS task definition to reference the associated IAM role.

Comment: *

Name: *

Email: *

Verification: *

A company wants to implement authentication for its new REST service using Amazon API Gateway. To authenticate the calls, each request must include HTTP headers with a client ID and user ID. These credentials must be compared to authentication data in an Amazon DynamoDB table.
What MUST the company do to implement this authentication in API Gateway?

• A.Implement an AWS Lambda authorizer that references the DynamoDB authentication table
• B.Modify the integration requests to require the credentials, then grant API Gateway access to the authentication table
• C.Implement an Amazon Cognito authorizer that references the DynamoDB authentication table
• D.Create a model that requires the credentials, then grant API Gateway access to the authentication table

Comment: *

Name: *

Email: *

Verification: *

A Developer is creating an Auto Scaling group whose instances need to publish a custom metric to Amazon CloudWatch.
Which method would be the MOST secure way to authenticate a CloudWatch PUT request?

• A.Create an IAM user with PutMetricData permission, and modify the Auto Scaling launch configuration to inject the user credentials into the instance user data.
• B.Create an IAM user with PutMetricData permission and put the user credentials in a private repository; have applications pull the credentials as needed.
• C.Create an IAM role with PutMetricData permission and modify the Auto Scaling launching configuration to launch instances using that role.
• D.Modify the CloudWatch metric policies to allow the PutMetricData permission to instances from the Auto Scaling group.

Comment: *

Name: *

Email: *

Verification: *

A company is providing read access to objects in an Amazon S3 bucket for different customers The company uses 1AM permissions to restnct access to the S3 bucket The customers can access only their own files Due to a regulation requirement the company needs to enforce encryption in transit for interactions with Amazon S3 Which solution will meet these requirements?

• A.Add an IAM policy to the IAM users to enforce the usage of the AWS SDK.
• B.Add a bucket policy to the S3 bucket to deny S3 actions when the aws SecureTransport condition is equal to false.
• C.Add a bucket policy to the S3 bucket to deny S3 actions when the s3 x-amz-acl condition is equal to public-read
• D.A Add an IAM policy to the IAM users that allows S3 actions when the s3 x-amz-acl condition is equal to bucket-owner-read

Comment: *

Name: *

Email: *

Verification: *

A company has a web application that uses an Amazon Cognito user pool for authentication. The company wants to create a login page with the company logo. What should a developer do to meet these requirements?

• A.Upload the logo to the Amazon Cognito app settings and point to the logo on a custom login page
• B.Create a login page with the company logo and upload it to Amazon Cognito
• C.Create a login page in Amazon API Gateway with the logo and save the link in Amazon Cognito.
• D.Create a hosted user interface in Amazon Cognito and customize it with the company logo

Comment: *

Name: *

Email: *

Verification: *