QUESTION: 265

A company has an application that runs on Amazon EC2 instances in an Amazon EC2 Auto Scaling group. The company uses AWS CodePipeline to deploy the application. The instances that run in the Auto Scaling group are constantly changing because of scaling events.

When the company deploys new application code versions, the company installs the AWS CodeDeploy agent on any new target EC2 instances and associates the instances with the CodeDeploy deployment group. The application is set to go live within the next 24 hours.

What should a solutions architect recommend to automate the application deployment process with the LEAST amount of operational overhead?

Configure Amazon EventBridge to invoke an AWS Lambda function when a new EC2 instance is launched into the Auto Scaling group. Code the Lambda function to associate the EC2 instances with the CodeDeploy deployment group.
Write a script to suspend Amazon EC2 Auto Scaling operations before the deployment of new code. When the deployment is complete, create a new AMI and configure the Auto Scaling group's launch template to use the new AMI for new launches. Resume Amazon EC2 Auto Scaling operations.
Create a new AWS CodeBuild project that creates a new AMI that contains the new code. Configure CodeBuild to update the Auto Scaling group’s launch template to the new AMI. Run an Amazon EC2 Auto Scaling instance refresh operation.
Create a new AMI that has the CodeDeploy agent installed. Configure the Auto Scaling group’s launch template to use the new AMI. Associate the CodeDeploy deployment group with the Auto Scaling group instead of the EC2 instances.

Answer(s): D

Explanation:

D) Creating a new AMI that has the CodeDeploy agent installed and configuring the Auto Scaling group’s launch template to use the new AMI automates the process of ensuring that new EC2 instances are ready for deployment as soon as they are launched. Associating the CodeDeploy deployment group with the Auto Scaling group instead of individual EC2 instances eliminates the need to manually install the CodeDeploy agent and register instances each time new instances are launched. This solution minimizes operational overhead and ensures smooth deployments with minimal effort.

Reveal Solution Next Question

QUESTION: 266

A company has a website that runs on four Amazon EC2 instances that are behind an Application Load Balancer (ALB). When the ALB detects that an EC2 instance is no longer available, an Amazon CloudWatch alarm enters the ALARM state. A member of the company's operations team then manually adds a new EC2 instance behind the ALB.

A solutions architect needs to design a highly available solution that automatically handles the replacement of EC2 instances. The company needs to minimize downtime during the switch to the new solution.

Which set of steps should the solutions architect take to meet these requirements?

Delete the existing ALB. Create an Auto Scaling group that is configured to handle the web application traffic. Attach a new launch template to the Auto Scaling group. Create a new ALB. Attach the Auto Scaling group to the new ALB. Attach the existing EC2 instances to the Auto Scaling group.
Create an Auto Scaling group that is configured to handle the web application traffic. Attach a new launch template to the Auto Scaling group. Attach the Auto Scaling group to the existing ALAttach the existing EC2 instances to the Auto Scaling group.
Delete the existing ALB and the EC2 instances. Create an Auto Scaling group that is configured to handle the web application traffic. Attach a new launch template to the Auto Scaling group. Create a new ALB. Attach the Auto Scaling group to the new ALB. Wait for the Auto Scaling group to launch the minimum number of EC2 instances.
Create an Auto Scaling group that is configured to handle the web application traffic. Attach a new launch template to the Auto Scaling group. Attach the Auto Scaling group to the existing ALB. Wait for the existing ALB to register the existing EC2 instances with the Auto Scaling group.

Answer(s): B

Explanation:

B) Creating an Auto Scaling group that is configured to handle the web application traffic and attaching the existing ALB and EC2 instances to the Auto Scaling group allows for seamless integration with minimal downtime. This solution ensures high availability by automatically replacing failed instances. By attaching the Auto Scaling group to the existing ALB, the company avoids the need to create a new ALB, thus minimizing downtime and the impact on the live environment.
This approach automates the process of replacing EC2 instances, improving fault tolerance and reducing manual intervention.

Reveal Solution Next Question

QUESTION: 267

A company wants to optimize AWS data-transfer costs and compute costs across developer accounts within the company's organization in AWS Organizations. Developers can configure VPCs and launch Amazon EC2 instances in a single AWS Region. The EC2 instances retrieve approximately 1 TB of data each day from Amazon S3.

The developer activity leads to excessive monthly data-transfer charges and NAT gateway processing charges between EC2 instances and S3 buckets, along with high compute costs. The company wants to proactively enforce approved architectural patterns for any EC2 instance and VPC infrastructure that developers deploy within the AWS accounts. The company does not want this enforcement to negatively affect the speed at which the developers can perform their tasks.

Which solution will meet these requirements MOST cost-effectively?

Create SCPs to prevent developers from launching unapproved EC2 instance types. Provide the developers with an AWS CloudFormation template to deploy an approved VPC configuration with S3 interface endpoints. Scope the developers' IAM permissions so that the developers can launch VPC resources only with CloudFormation.
Create a daily forecasted budget with AWS Budgets to monitor EC2 compute costs and S3 data-transfer costs across the developer accounts. When the forecasted cost is 75% of the actual budget cost, send an alert to the developer teams. If the actual budget cost is 100%, create a budget action to terminate the developers' EC2 instances and VPC infrastructure.
Create an AWS Service Catalog portfolio that users can use to create an approved VPC configuration with S3 gateway endpoints and approved EC2 instances. Share the portfolio with the developer accounts. Configure an AWS Service Catalog launch constraint to use an approved IAM role. Scope the developers' IAM permissions to allow access only to AWS Service Catalog.
Create and deploy AWS Config rules to monitor the compliance of EC2 and VPC resources in the developer AWS accounts. If developers launch unapproved EC2 instances or if developers create VPCs without S3 gateway endpoints, perform a remediation action to terminate the unapproved resources.

Answer(s): C

Explanation:

C) Creating an AWS Service Catalog portfolio allows the company to provide developers with pre-approved VPC configurations and EC2 instance types, which can include S3 gateway endpoints to minimize data transfer costs. By sharing the portfolio with the developer accounts, the company ensures that only approved infrastructure is deployed. Configuring an AWS Service Catalog launch constraint to use an approved IAM role and scoping developer permissions to Service Catalog enables governance without negatively impacting developer productivity. This solution provides cost optimization and proactive architectural enforcement with minimal operational overhead, making it the most cost-effective option.

Reveal Solution Next Question

QUESTION: 268

A company is expanding. The company plans to separate its resources into hundreds of different AWS accounts in multiple AWS Regions. A solutions architect must recommend a solution that denies access to any operations outside of specifically designated Regions.

Which solution will meet these requirements?

Create IAM roles for each account. Create IAM policies with conditional allow permissions that include only approved Regions for the accounts.
Create an organization in AWS Organizations. Create IAM users for each account. Attach a policy to each user to block access to Regions where an account cannot deploy infrastructure.
Launch an AWS Control Tower landing zone. Create OUs and attach SCPs that deny access to run services outside of the approved Regions.
Enable AWS Security Hub in each account. Create controls to specify the Regions where an account can deploy infrastructure.

Answer(s): C

Explanation:

C) Launching an AWS Control Tower landing zone allows the company to create organizational units (OUs) and attach Service Control Policies (SCPs) that explicitly deny access to services in regions outside of the approved list. SCPs are enforced across all accounts within the organization, ensuring compliance with the designated region restrictions. This solution provides centralized governance and control over multiple accounts and regions, making it the most effective and scalable approach to meet the company's requirements.

Reveal Solution Next Question

Free AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL Exam Braindumps (page: 67)

QUESTION: 265

Explanation:

QUESTION: 266

Explanation:

QUESTION: 267

Explanation:

QUESTION: 268

Explanation: