A company wants to ingest customer payment data into the company's data lake in Amazon S3. The company receives payment data every minute on average. The company wants to analyze the payment data in real time. Then the company wants to ingest the data into the data lake.Which solution will meet these requirements with the MOST operational efficiency?
Answer(s): C
K) Correct answer C: Kinesis Data Firehose handles near real-time ingestion into S3 with automatic buffering and delivery, and Kinesis Data Analytics provides real-time analysis, delivering results for streaming data without custom servers.A) Kinesis Data Streams with Lambda requires managing shard throughput and scaling; operational overhead is higher than Firehose for direct S3 delivery with analytics.B) Glue is ETL oriented, not ideal for real-time ingestion; Data Analytics works with streams but lacks the end-to-end managed ingestion efficiency into S3.D) API Gateway with Lambda adds API management and incurs higher operational cost and latency for continuous streaming data.
A company runs a website that uses a content management system (CMS) on Amazon EC2. The CMS runs on a single EC2 instance and uses an Amazon Aurora MySQL Multi-AZ DB instance for the data tier. Website images are stored on an Amazon Elastic Block Store (Amazon EBS) volume that is mounted inside the EC2 instance.Which combination of actions should a solutions architect take to improve the performance and resilience of the website? (Choose two.)
Answer(s): C,E
Moving images to a shared, scalable storage that is mounted on all EC2s improves performance and resilience: EFS provides NFS-compatible, scalable file storage accessible from multiple instances, enabling high availability and independent scaling. CloudFront in option E adds edge caching, reducing latency for static assets and increasing resilience via CDN distribution. A) S3 mounted on instances is not a standard, reliable mount and adds complexity. B) NFS from primary EC2 is a single point of failure and limits scalability. D) AMI + ASG + ALB improves compute resilience but doesn’t address shared data access or caching for images. C) and E together address both shared storage and global distribution.
A company runs an infrastructure monitoring service. The company is building a new feature that will enable the service to monitor data in customer AWS accounts. The new feature will call AWS APIs in customer accounts to describe Amazon EC2 instances and read Amazon CloudWatch metrics.What should the company do to obtain access to customer accounts in the MOST secure way?
Answer(s): A
A) The correct approach is for customers to create an IAM role in their account with read-only EC2 and CloudWatch permissions and a trust policy allowing the company’s account to assume it. This enables cross-account access without sharing long-term credentials, following least privilege and AWS IAM best practices.B) Token vending with temporary credentials adds complexity and potential security risk if not scoped and rotated properly; it’s not the standard trusted-cross-account pattern for ongoing access.C) Creating IAM users with long-term keys requires storing secrets and poses risk; not ideal for service-to-service access across accounts.D) Cognito is not appropriate for cross-account IAM role assumption and would introduce unnecessary user-management surface.
A company needs to connect several VPCs in the us-east-1 Region that span hundreds of AWS accounts. The company's networking team has its own AWS account to manage the cloud network.What is the MOST operationally efficient solution to connect the VPCs?
The correct answer is C. AWS Transit Gateway centralizes and scales connectivity across hundreds of VPCs and accounts from a single hub, simplifying management and reducing per-connection configurations.A is incorrect because VPC peering is point-to-point and does not scale well for hundreds of VPCs and accounts, leading to complex mesh and maintenance overhead.B is incorrect because NAT/Internet gateways add costly egress/NAT management and are not designed for private VPC-to-VPC connectivity across many accounts.D is incorrect because VPN gateways plus a transit VPC adds complexity and is less operationally efficient than a single Transit Gateway hub for large-scale inter-VPC connectivity.
A company has Amazon EC2 instances that run nightly batch jobs to process data. The EC2 instances run in an Auto Scaling group that uses On-Demand billing. If a job fails on one instance, another instance will reprocess the job. The batch jobs run between 12:00 AM and 06:00 AM local time every day.Which solution will provide EC2 instances to meet these requirements MOST cost-effectively?
Using Spot Instances in an Auto Scaling group during the nightly batch window offers the lowest cost for non-urgent, retryable workloads with fault tolerance, since reprocessing can occur on another instance if one fails. A Spot-based launch template allows cost savings if capacity is available while still meeting timing with scaling policies.A) Savings Plans apply to On-Demand usage across instance families and regions but aren’t scoped to a specific Auto Scaling workload window, offering less direct cost control for this batch pattern.B) Reserved Instances are for long-term, steady-state usage and require upfront commitment per instance type, reducing flexibility for intermittent nightly jobs.D) Simply increasing instance size increases cost without ensuring price optimization; it does not leverage spare Spot capacity.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.