A company has an internet-facing application that uses Web Identity Federation to obtain a temporary credential from AWS Security Token Service (AWS STS). The app then uses the token to access AWS services.
Review the following response:

Based on the response displayed what permissions are associated with the call from the application?

• A.Permissions associated with the default role used when the AWS service was built
• B.Permissions associated with the role AROACLKWSDQRAOEXAMPLE:app1
• C.Permission associated with the IAM principal that owns the AccessKeyID ASgeIAIOSFODNN7EXAMPLE
• D.Permissions associated with the account that owns the AWS service

Comment: *

Name: *

Email: *

Verification: *

A company is migrating a legacy application to a serverless application on AWS. The legacy application consists of a set of web services that are exposed by a Amazon API Gateway API. A developer needs to replace the existing implementation of web services with AWS Lambda functions. The developer needs to test new version of the" API that uses the functions in production. The developer must minimize the impact of the testing on the application's users.
Which solution will meet these requirements?

• A.Create a deployment stage. Enable mutual TLS for the new version of the API.
• B.Create a development stage for the new version of the API. Use a canary deployment.
• C.Create a development stage for the new version of the API. Promote a canary release.
• D.Create a beta stage for the new version of the API. Send the updated endpoint to the users.

Comment: *

Name: *

Email: *

Verification: *

A developer is provided with an HTTPS clone URL for an AWS CodeCommit repository.
What needs to be configured before cloning this repository?

• A.Use AWS KMS to set up public and private keys for use with CodeCommit.
• B.Generate encryption keys using AWS CloudHSM, then export the key for use with AWS CodeCommit.
• C.Use AWS certificate manager to provision public and private SSL/TLS certificates.
• D.Set up the Git credential helper to use an AWS credential profile, and enable the helper to send the path to the repositories.

Comment: *

Name: *

Email: *

Verification: *

A developer needs to create an application that supports Security Assertion Markup Language (SAML) and Facebook authentication It must also allow access to AWS services, such as Amazon DynamoDB.
Which AWS service or feature will meet these requirements with the LEAST amount of additional coding?

• A.AWSAppSync
• B.Amazon Cognito identity pools
• C.Amazon Cognito user pools
• D.Amazon Lambda@Edge

Comment: *

Name: *

Email: *

Verification: *

A Developer has an application that can upload tens of thousands of objects per second to Amazon S3 in parallel within a single AWS account. As part of new requirements, data stored in S3 must use server side encryption with AWS KMS (SSE-KMS). After creating this change, performance of the application is slower.
Which of the following is MOST likely the cause of the application latency?

• A.KMS requires that an alias be used to create an independent display name that can be mapped to a CMK.
• B.Amazon S3 throttles the rate at which uploaded objects can be encrypted using Customer Master Keys.
• C.The client encryption of the objects is using a poor algorithm.
• D.The AWS KMS API calls limit is less than needed to achieve the desired performance.

Comment: *

Name: *

Email: *

Verification: *