A company runs a container application by using Amazon Elastic Kubernetes Service (Amazon EKS). The application includes microservices that manage customers and place orders. The company needs to route incoming requests to the appropriate microservices.
Which solution will meet this requirement MOST cost-effectively?

• A.Use the AWS Load Balancer Controller to provision a Network Load Balancer.
• B.Use the AWS Load Balancer Controller to provision an Application Load Balancer.
• C.Use an AWS Lambda function to connect the requests to Amazon EKS.
• D.Use Amazon API Gateway to connect the requests to Amazon EKS.

Comment: *

Name: *

Email: *

Verification: *

An online retail company has more than 50 million active customers and receives more than 25,000 orders each day. The company collects purchase data for customers and stores this data in Amazon S3. Additional customer data is stored in Amazon RDS.
The company wants to make all the data available to various teams so that the teams can perform analytics.
The solution must provide the ability to manage fine-grained permissions for the data and must minimize operational overhead.
Which solution will meet these requirements?

• A.Migrate the purchase data to write directly to Amazon RDS. Use RDS access controls to limit access.
• B.Schedule an AWS Lambda function to periodically copy data from Amazon RDS to Amazon S3. Create an AWS Glue crawler. Use Amazon Athena to query the data. Use S3 policies to limit access.
• C.Create a data lake by using AWS Lake Formation. Create an AWS Glue JDBC connection to Amazon RDS. Register (he S3 bucket in Lake Formation. Use Lake Formation access controls to limit access.
• D.Create an Amazon Redshift cluster. Schedule an AWS Lambda function to periodically copy data from Amazon S3 and Amazon RDS to Amazon Redshift. Use Amazon Redshift access controls to limit access.

Comment: *

Name: *

Email: *

Verification: *

A company is running a popular social media website. The website gives users the ability to upload images to share with other users. The company wants to make sure that the images do not contain inappropriate content. The company needs a solution that minimizes development effort.
What should a solutions architect do to meet these requirements?

• A.Use Amazon Comprehend to detect inappropriate content. Use human review for low-confidence predictions.
• B.Use Amazon Rekognition to detect inappropriate content. Use human review for low-confidence predictions.
• C.Use Amazon SageMaker to detect inappropriate content. Use ground truth to label low-confidence predictions.
• D.Use AWS Fargate to deploy a custom machine learning model to detect inappropriate content. Use ground truth to label low-confidence predictions.

Comment: *

Name: *

Email: *

Verification: *

A new company policy requires IAM users to change their passwords' minimum length to 12 characters. After a random inspection, you found out that there are still employees who do not follow the policy.
How can you automatically check and evaluate whether the current password policy for an account complies with the company password policy?

• A.Configure AWS Config to trigger an evaluation that will check the compliance for a user's password periodically.
• B.Create a rule in the Amazon CloudWatch event. Build an event pattern to match events on IAM. Set the event name to "ChangePassword" in the event pattern. Configure SNS to send notifications to you whenever a user has made changes to his password.
• C.Create a Scheduled Lambda Function that will run a custom script to check compliance against changes made to the passwords periodically.
• D.Create a CloudTrail trail. Filter the result by setting the attribute to "Event Name" and lookup value to
  "ChangePassword". This easily gives you the list of users who have made changes to their passwords.

Correct Answer: A

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

In the scenario given, we can utilize AWS Config to check for compliance on the password policy by configuring the Config rule to check the IAM_PASSWORD_POLICY on an account. Additionally, because Config integrates with AWS Organizations, we can improve the set up to aggregate compliance information across accounts to a central dashboard.
Hence, the correct answer is: Configure AWS Config to trigger an evaluation that will check the compliance for a user's password periodically.
Create a CloudTrail trail. Filter the result by setting the attribute to "Event Name" and lookup value to
"ChangePassword". This easily gives you the list of users who have made changes to their passwords is incorrect because this setup will just give you the name of the users who have made changes to their respective passwords. It will not give you the ability to check whether their passwords have met the required minimum length.
Create a Scheduled Lambda function that will run a custom script to check compliance against changes made to the passwords periodically is a valid solution but still incorrect. AWS Config is already integrated with AWS Lambda. You don't have to create and manage your own Lambda function. You just have to define a Config rule where you will check compliance, and Lambda will process the evaluation.
Moreover, you can't directly create a scheduled function by using Lambda itself. You have to create a rule in AWS CloudWatch Events to run the Lambda functions on the schedule that you define.
Create a rule in the Amazon CloudWatch event. Build an event pattern to match events on IAM. Set the event name to "ChangePassword" in the event pattern. Configure SNS to send notifications to you whenever a user has made changes to his password is incorrect because this setup will just alert you whenever a user changes his password. Sure, you'll have information about who made changes, but that is not enough to check whether it complies with the required minimum password length. This can be easily done in AWS Config.
References:
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html
https://aws.amazon.com/config/
Check out this AWS Config Cheat Sheet:
https://tutorialsdojo.com/aws-config/

Comment: *

Name: *

Email: *

Verification: *

A company has an AWS account used for software engineering. The AWS account has access to the company's on-premises data center through a pair of AWS Direct Connect connections. All non-VPC traffic routes to the virtual private gateway.
A development team recently created an AWS Lambda function through the console. The development team needs to allow the function to access a database that runs in a private subnet in the company's data center.
Which solution will meet these requirements?

• A.Configure the Lambda function to run in the VPC with the appropriate security group.
• B.Set up a VPN connection from AWS to the data center. Route the traffic from the Lambda function through the VPN.
• C.Update the route tables in the VPC to allow the Lambda function to access the on-premises data center through Direct Connect.
• D.Create an Elastic IP address. Configure the Lambda function to send traffic through the Elastic IP address without an elastic network interface.

Comment: *

Name: *

Email: *

Verification: *