A developer is building an application that gives users the ability to view bank account from multiple sources in a single dashboard. The developer has automated the process to retrieve API credentials for these sources.
The process invokes an AWS Lambda function that is associated with an AWS CloudFormation cotton resource.
The developer wants a solution that will store the API credentials with minimal operational overhead.
When solution will meet these requirements?

• A.Add an AWS Secrets Manager GenerateSecretString resource to the CloudFormation template. Set the value to reference new credentials to the Cloudformation resource.
• B.Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing, custom resource to store the credentials as a parameter. Set the parameter value to reference the new credentials. Set ma parameter type to SecureString.
• C.Add an AWS Systems Manager Parameter Store resource to the CloudFormation template. Set the CloudFormation resource value to reference the new credentials Set the resource NoEcho attribute to true.
• D.Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing custom resources to store the credentials as a parameter. Set the parameter value to reference the new credentials. Set the parameter NoEcho attribute to true.

Comment: *

Name: *

Email: *

Verification: *

A developer has written the following IAM policy to provide access to an Amazon S3 bucket:

Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?

• A.Access on all buckets except the "DOC-EXAMPLE-BUCKET" bucket
• B.Access on all buckets that start with "DOC-EXAMPLE-BUCKET" except the
  "DOC-EXAMPLE-BUCKET/secrets" bucket
• C.Access on all objects in the "DOC-EXAMPLE-BUCKET" bucket along with access to all S3 actions for objects in the "DOC-EXAMPLE-BUCKET" bucket that start with "secrets"
• D.Access on all objects in the "DOC-EXAMPLE-BUCKET" bucket except on objects that start with
  "secrets"

Comment: *

Name: *

Email: *

Verification: *

A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS Key Management Service (AWS KMS) key was used and by whom.
Which encryption option will meet these requirements?

• A.Server-side encryption with Amazon S3 managed keys (SSE-S3)
• B.Server-side encryption with AWS KMS managed keys (SSE-KMS}
• C.Server-side encryption with customer-provided keys (SSE-C)
• D.Server-side encryption with self-managed keys

Comment: *

Name: *

Email: *

Verification: *

A company needs to distribute firmware updates to its customers around the world.
Which service will allow easy and secure control of the access to the downloads at the lowest cost?

• A.Create a dedicated Amazon CloudFront Distribution for each customer.
• B.Use Amazon CloudFront with AWS Lambda@Edge.
• C.Use Amazon CloudFront with signed URLs for Amazon S3.
• D.Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket.

Comment: *

Name: *

Email: *

Verification: *

A developer is creating a new REST API by using Amazon API Gateway and AWS Lambda. The development team tests the API and validates responses for the known use cases before deploying the API to the production environment.
The developer wants to make the REST API available for testing by using API Gateway locally.
Which AWS Serverless Application Model Command Line Interface (AWS SAM CLI) subcommand will meet these requirements?

• A.Sam local invoke
• B.Sam local generate-event
• C.Sam local start-lambda
• D.Sam local start-api

Comment: *

Name: *

Email: *

Verification: *