A company wants to build a web application on AWS. Client access requests to the website are not predictable and can be idle for a long time. Only customers who have paid a subscription fee can have the ability to sign in and use the web application.Which combination of steps will meet these requirements MOST cost-effectively? (Choose three.)
Answer(s): A,C,E
A) Correct. Lambda + API Gateway provides serverless, on-demand compute with pay-per-use for idle periods; DynamoDB stores user data; scalable cost-effective for unpredictable traffic.C) Correct. Amazon Cognito user pool handles user authentication and sign-in for web/mobile apps with managed user directories and security features.E) Correct. AWS Amplify simplifies frontend hosting and integrates with CloudFront for global delivery, enabling cost-effective static hosting with authentication integration via Cognito.B) Incorrect. ECS behind ALB with RDS adds compute and management overhead; uses Lambda in the description, which is misaligned and not cost-optimized for sporadic traffic.D) Incorrect. Cognito identity pool is for federated identities and temporary credentials; not needed for standard user authentication if using a user pool.F) Incorrect. S3 static hosting with PHP is unsupported; PHP requires server-side processing not suitable for S3 hosting.
A media company uses an Amazon CloudFront distribution to deliver content over the internet. The company wants only premium customers to have access to the media streams and file content. The company stores all content in an Amazon S3 bucket. The company also delivers content on demand to customers for a specific purpose, such as movie rentals or music downloads.Which solution will meet these requirements?
Answer(s): B
CloudFront signed URLs provide time-limited, secure access to content served from S3, enabling only premium customers to stream or download assets. This ties access control to individual users and can enforce expiry, request policies, and geographic restrictions if needed.A) S3 signed cookies would grant access to multiple objects for a user across a session but are less commonly used for directly protecting CDN-delivered content; they are more complex to manage for streaming.C) OAC restricts S3 bucket access but does not apply per-user access control through CloudFront for signed content delivery.D) Field-level encryption protects data in transit but not access control per user or per request for content delivery.
A company runs Amazon EC2 instances in multiple AWS accounts that are individually bled. The company recently purchased a Savings Pian. Because of changes in the company’s business requirements, the company has decommissioned a large number of EC2 instances. The company wants to use its Savings Plan discounts on its other AWS accounts.Which combination of steps will meet these requirements? (Choose two.)
Answer(s): A,D
The correct answers are A and D because Savings Plans discount sharing requires enabling it in the payer/account that owns the plan (A) and using AWS Organizations to centralize accounts under a new or existing payer with invited member accounts (D). A enables discount sharing in the management payer account. D sets up an Organization in a new or existing payer and invites other accounts so discounts can flow to member accounts. B is incorrect because discount sharing must occur at the payer account level, not from each individual account. C is incorrect because RAM sharing is not supported for Savings Plans. E is incorrect because it implies using an existing account as the payer instead of creating a dedicated payer under Organizations.
A retail company uses a regional Amazon API Gateway API for its public REST APIs. The API Gateway endpoint is a custom domain name that points to an Amazon Route 53 alias record. A solutions architect needs to create a solution that has minimal effects on customers and minimal data loss to release the new version of APIs.Which solution will meet these requirements?
Answer(s): A
The canary release approach minimizes customer impact and data loss by gradually shifting traffic to the new API version and validating functionality before full promotion.A) Correct. Canary releases with API Gateway deployment stages allow controlled traffic split, quick rollback, and validation before full production, reducing risk.B) Incorrect. Importing a new OpenAPI version without staged traffic control risks abrupt changes; merge mode updates can affect live traffic without gradual validation.C) Incorrect. Overwrite mode replaces the API, potentially discarding existing behavior and data; lacks safe gradual rollout or rollback.D) Incorrect. Creating a new API and domain requires managing a separate endpoint and DNS cutover, increasing disruption and risk rather than leveraging existing canary rollout.
A company wants to direct its users to a backup static error page if the company's primary website is unavailable. The primary website's DNS records are hosted in Amazon Route 53. The domain is pointing to an Application Load Balancer (ALB). The company needs a solution that minimizes changes and infrastructure overhead.Which solution will meet these requirements?
Route 53 active-passive failover uses health checks to redirect traffic to a healthy endpoint (S3 error page) when the primary ALB is unhealthy, minimizing changes and infrastructure overhead.A) Latency routing with S3 page adds complexity and does not automatically route only on failure; not ideal for failover to a static page. C) Active-active pairing with EC2 adds additional endpoints and management; unnecessary when failover suffices. D) Multivalue routing requires health checks per record but still serves multiple endpoints; not as clean for automatic failover to a static page.
Post your Comments and Discuss Amazon AWS-SOLUTION-ARCHITECT-ASSOCIATE exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTION-ARCHITECT-ASSOCIATE content, but please register or login to continue.