A financial services company receives a regular data feed from its credit card servicing partner. Approximately 5,000 records are sent every 15 minutes in plaintext, delivered over HTTPS directly into an Amazon S3 bucket with server-side encryption. This feed contains sensitive credit card primary account number (PAN) data. The company needs to automatically mask the PAN before sending the data to another S3 bucket for additional internal processing. The company also needs to remove and merge specific fields, and then transform the record into JSON format. Additionally, extra feeds are likely to be added in the future, so any design needs to be easily expandable.Which solutions will meet these requirements?
Answer(s): C
The chosen solution is:C) Create an AWS Glue crawler and custom classifier based on the data feed formats and build a table definition to match. Invoke an AWS Lambda function on file delivery to start an AWS Glue ETL job to transform the entire record according to the processing and transformation requirements. Define the output format as JSON. Once complete, have the ETL job send the results to another S3 bucket for internal processing.Reasoning:1.Data Transformation and Processing:oAWS Glue is a managed ETL (Extract, Transform, Load) service that is designed for processing and transforming large datasets. It is well-suited for handling the requirements of masking sensitive information (like PAN), merging fields, and converting records into JSON format.2.Integration with S3:oBy setting up a Glue crawler, the data from the incoming feed can be automatically classified, and a schema can be defined. This schema will help in processing the records effectively.3.Scalability and Flexibility:oAWS Glue can easily scale to handle varying volumes of data. As the company anticipates additional feeds in the future, Glue provides the flexibility to accommodate new data sources and formats without significant changes to the architecture.4.Automation with Lambda:oThe solution allows the use of AWS Lambda to trigger the Glue ETL job immediately upon the arrival of new data in S3. This event-driven architecture ensures timely processing of incoming data.5.Minimal Operational Overhead:oSince AWS Glue is a fully managed service, it minimizes the operational overhead of maintaining infrastructure, allowing the company to focus on data processing rather than resource management.This combination of AWS Glue and Lambda effectively meets the company’s requirements for data transformation, security (masking sensitive data), and scalability while ensuring that the process is streamlined and efficient.
A company wants to use AWS to create a business continuity solution in case the company's main on-premises application fails. The application runs on physical servers that also run other applications. The on-premises application that the company is planning to migrate uses a MySQL database as a data store. All the company's on-premises applications use operating systems that are compatible with Amazon EC2.Which solution will achieve the company's goal with the LEAST operational overhead?
Answer(s): B
The chosen solution is:B) Install the AWS Replication Agent on the source servers, including the MySQL servers. Initialize AWS Elastic Disaster Recovery in the target AWS Region. Define the launch settings. Frequently perform failover and fallback from the most recent point in time.Reasoning:1.AWS Elastic Disaster Recovery:oAWS Elastic Disaster Recovery is designed specifically for disaster recovery scenarios. It allows for the replication of on-premises servers to AWS with minimal operational overhead, making it suitable for the company's needs.2.Comprehensive Replication:oBy installing the AWS Replication Agent on the source servers, the company can ensure that all data, including the MySQL database, is continuously replicated to AWS. This minimizes data loss and ensures that the latest state of the application is available in case of a failure.3.Simple Cutover Process:oElastic Disaster Recovery provides a straightforward process for failing over to the replicated instances in AWS. The company can define launch settings to ensure that the applications are configured correctly during the failover, simplifying the operational process during a disaster.4.Testing and Validation:oThe solution supports regular testing of the failover process, which is critical for validating the business continuity plan. This ensures that the company is prepared for actual failover events without disrupting ongoing operations.5.Least Operational Overhead:oThis approach minimizes the need for manual interventions or complex setups. The focus is on leveraging AWS services that are designed for disaster recovery, leading to less management overhead compared to other options.Overall, option B effectively addresses the company's requirements for a business continuity solution with the least operational complexity and ensures that the on-premises application can failover to AWS smoothly.
A company is subject to regulatory audits of its financial information. External auditors who use a single AWS account need access to the company's AWS account. A solutions architect must provide the auditors with secure, read-only access to the company's AWS account. The solution must comply with AWS security best practices.Which solution will meet these requirements?
The chosen solution is:B) In the company's AWS account, create an IAM role that trusts the auditors' AWS account. Create an IAM policy that has the required permissions. Attach the policy to the role. Assign a unique external ID to the role's trust policy.Reasoning:1.Cross-Account Access:oCreating an IAM role that trusts the auditors' AWS account allows for secure cross-account access. This ensures that auditors can assume the role only if they are coming from their specified AWS account.2.Least Privilege Principle:oBy creating an IAM policy with only the necessary read-only permissions and attaching it to the role, the company can ensure compliance with the principle of least privilege. Auditors will only have access to the resources they need for their audit without any unnecessary permissions.3.Use of External ID:oAssigning a unique external ID to the role's trust policy adds an extra layer of security. This helps prevent the confused deputy problem, where a trusted entity inadvertently accesses resources on behalf of an unauthorized user.4.Compliance with AWS Security Best Practices:oThis approach adheres to AWS security best practices by avoiding the use of static credentials (as seen in option C) and ensuring that access can be tightly controlled and monitored through IAM roles.5.Temporary Access:oSince roles are used, auditors can assume the role only when needed, and there is no need to create and manage individual users for each auditor (as suggested in option D), simplifying management and reducing overhead.Overall, option B provides a secure, scalable, and compliant method for granting auditors read-only access to the company’s AWS resources, making it the best choice for this scenario.
A company has a latency-sensitive trading platform that uses Amazon DynamoDB as a storage backend. The company configured the DynamoDB table to use on-demand capacity mode. A solutions architect needs to design a solution to improve the performance of the trading platform. The new solution must ensure high availability for the trading platform.Which solution will meet these requirements with the LEAST latency?
The chosen solution is:B) Create a three-node DynamoDB Accelerator (DAX) cluster. Configure an application to read data by using DAX and to write data directly to the DynamoDB table.Reasoning:1.High Availability:oA three-node DAX cluster provides redundancy and high availability. If one node fails, the other two can still serve requests, ensuring that the application remains operational.2.Low Latency for Reads:oUsing DAX for read operations significantly improves the performance of read requests by caching frequently accessed data in memory. This is especially beneficial for a latency-sensitive application like a trading platform, where response times need to be minimized.3.Direct Writes to DynamoDB:oWriting data directly to DynamoDB while using DAX for reads ensures that all updates to the data are immediately consistent and eliminates the need for caching write operations. This design choice avoids potential data staleness in the cache, maintaining the integrity and timeliness of the trading data.4.Performance Optimization:oThe combination of a three-node DAX cluster and direct writes to DynamoDB provides an optimal balance of performance and reliability, minimizing read latencies without compromising data consistency during write operations.In summary, option B effectively enhances the performance and availability of the trading platform while ensuring low latency for read operations, making it the best choice for this scenario.
A company has migrated an application from on premises to AWS. The application frontend is a static website that runs on two Amazon EC2 instances behind an Application Load Balancer (ALB). The application backend is a Python application that runs on three EC2 instances behind another ALB. The EC2 instances are large, general purpose On-Demand Instances that were sized to meet the on-premises specifications for peak usage of the application.The application averages hundreds of thousands of requests each month. However, the application is used mainly during lunchtime and receives minimal traffic during the rest of the day.A solutions architect needs to optimize the infrastructure cost of the application without negatively affecting the application availability.Which combination of steps will meet these requirements? (Choose two.)
Answer(s): B,E
The chosen solutions are:B) Move the application frontend to a static website that is hosted on Amazon S3.E) Deploy the backend Python application to general purpose burstable EC2 instances that have the same number of cores as the existing EC2 instances.Reasoning:1.Option B: Move the application frontend to a static website hosted on Amazon S3.oCost-Effectiveness: Hosting static websites on Amazon S3 is significantly cheaper than running EC2 instances, especially for a website that primarily serves static content (like HTML, CSS, and JavaScript).oScalability and Availability: Amazon S3 is designed for high durability and availability, meaning it can handle fluctuations in traffic seamlessly without the need for managing EC2 instances.oReduced Management Overhead: By moving to S3, the company eliminates the need for server maintenance and can focus on application development rather than infrastructure management.2.Option E: Deploy the backend Python application to general purpose burstable EC2 instances that have the same number of cores as the existing EC2 instances.oCost Optimization: Burstable performance instances (like T3 or T4g) are ideal for applications that do not consistently require high CPU performance. They allow for lower costs while still providing the necessary CPU power during peak times, such as lunchtime.oEfficiency: By utilizing the same number of cores, the application can maintain its performance levels while taking advantage of cost savings associated with burstable instances during off-peak hours.
A company is running an event ticketing platform on AWS and wants to optimize the platform's cost-effectiveness. The platform is deployed on Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 and is backed by an Amazon RDS for MySQL DB instance. The company is developing new application features to run on Amazon EKS with AWS Fargate.The platform experiences infrequent high peaks in demand. The surges in demand depend on event dates.Which solution will provide the MOST cost-effective setup for the platform?
The chosen solution is:B) Purchase Compute Savings Plans for the predicted medium load of the EKS cluster. Scale the cluster with On-Demand Capacity Reservations based on event dates for peaks. Purchase 1-year No Upfront Reserved Instances for the database to meet the predicted base load. Temporarily scale out database read replicas during peaks.This approach provides cost savings through Savings Plans while allowing flexibility to handle peak loads with On-Demand Capacity Reservations and additional read replicas during high-demand periods.
A company has deployed an application on AWS Elastic Beanstalk. The application uses Amazon Aurora for the database layer. An Amazon CloudFront distribution serves web requests and includes the Elastic Beanstalk domain name as the origin server. The distribution is configured with an alternate domain name that visitors use when they access the application.Each week, the company takes the application out of service for routine maintenance. During the time that the application is unavailable, the company wants visitors to receive an informational message instead of a CloudFront error message.A solutions architect creates an Amazon S3 bucket as the first step in the process.Which combination of steps should the solutions architect take next to meet the requirements? (Choose three.)
Answer(s): A,C,D
The selected steps to meet the requirements are:A) Upload static informational content to the S3 bucket.C) Set the S3 bucket as a second origin in the original CloudFront distribution. Configure the distribution and the S3 bucket to use an origin access identity (OAI).D) During the weekly maintenance, edit the default cache behavior to use the S3 origin. Revert the change when the maintenance is complete.These steps ensure that while the application is down for maintenance, users receive the static informational content from the S3 bucket instead of an error message from CloudFront. The S3 bucket serves as a fallback option, and the configuration allows for seamless switching between the application and the informational content.
A company gives users the ability to upload images from a custom application. The upload process invokes an AWS Lambda function that processes and stores the image in an Amazon S3 bucket. The application invokes the Lambda function by using a specific function version ARN.The Lambda function accepts image processing parameters by using environment variables. The company often adjusts the environment variables of the Lambda function to achieve optimal image processing output. The company tests different parameters and publishes a new function version with the updated environment variables after validating results. This update process also requires frequent changes to the custom application to invoke the new function version ARN. These changes cause interruptions for users.A solutions architect needs to simplify this process to minimize disruption to users.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): D
The selected solution is:D) Create a Lambda function alias. Modify the client application to use the function alias ARN. Reconfigure the Lambda alias to point to new versions of the function when the company finishes testing.This approach simplifies the deployment process by allowing the application to consistently invoke the alias instead of changing the ARN for each new version. By updating the alias to point to the new function version after testing, the company can seamlessly switch to the updated processing parameters without interrupting user experience. This minimizes disruption and reduces operational overhead associated with frequent changes.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.