A company wants to manage Amazon Machine Images (AMIs). The company currently copies AMIs to the same AWS Region where the AMIs were created. The company needs to design an application that captures AWS API calls and sends alerts whenever the Amazon EC2 CreateImage API operation is called within the company’s account.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): C
The correct answer C is best: EventBridge rule directly filters for CreateImage events and can trigger an SNS notification with minimal setup and low operational overhead.A is incorrect: Lambda querying CloudTrail logs requires polling and custom logic, increasing maintenance and latency.B is incorrect: Using Athena and S3 introduces ETL/query overhead and batch processing rather than real-time alerting; more complex to maintain.D is incorrect: Involves SQS and Lambda but adds unnecessary queueing and processing steps; more components than needed for real-time alerting.
A company owns an asynchronous API that is used to ingest user requests and, based on the request type, dispatch requests to the appropriate microservice for processing. The company is using Amazon API Gateway to deploy the API front end, and an AWS Lambda function that invokes Amazon DynamoDB to store user requests before dispatching them to the processing microservices.The company provisioned as much DynamoDB throughput as its budget allows, but the company is still experiencing availability issues and is losing user requests.What should a solutions architect do to address this issue without impacting existing users?
Answer(s): D
The correct answer is D. Using an Amazon SQS queue with Lambda introduces decoupling and buffering between API Gateway/Lambda and DynamoDB, smoothing spikes and preventing request loss when DynamoDB throughput is saturated.A) Throttling at API Gateway helps control traffic but does not prevent backpressure and can still result in dropped requests if downstream is saturated.B) DynamoDB Accelerator (DAX) speeds reads, not writes buffering, and Lambda interaction remains pronged to DynamoDB write throughput limitations.C) A secondary index does not address write throughput or buffering of bursts; it adds storage/throughput pressure without solving queuing needs.
A company needs to move data from an Amazon EC2 instance to an Amazon S3 bucket. The company must ensure that no API calls and no data are routed through public internet routes. Only the EC2 instance can have access to upload data to the S3 bucket.Which solution will meet these requirements?
Answer(s): A
A) A VPC interface endpoint for S3 ensures that data and API calls to S3 flow entirely within the AWS network, never over the public internet; the bucket policy restricting access to the EC2 instance’s IAM role enforces the required access. B is incorrect because a gateway endpoint for S3 is not tied to a specific Availability Zone and the approach with security groups on the endpoint is not applicable; interface endpoint is the correct model for private access from a single subnet/ENI. C and D are incorrect because they rely on manually querying and routing to AWS public service endpoints, which can route via the internet and are not private isolated paths.
A solutions architect is designing the architecture of a new application being deployed to the AWS Cloud. The application will run on Amazon EC2 On-Demand Instances and will automatically scale across multiple Availability Zones. The EC2 instances will scale up and down frequently throughout the day. An Application Load Balancer (ALB) will handle the load distribution. The architecture needs to support distributed session data management. The company is willing to make changes to code if needed.What should the solutions architect do to ensure that the architecture supports distributed session data management?
Amazon ElastiCache provides a centralized, in-memory store for session data accessible by all EC2 instances across AZs, enabling true distributed session management for auto-scaling and load-balanced workloads.A) Correct: ElastiCache is designed for fast, scalable session state shared across instances and availability zones.B) Incorrect: ALB sticky sessions tie a user to a specific instance, not suitable for distributed sessions with frequent scaling.C) Incorrect: Session Manager is for remote instance management, not application session data storage.D) Incorrect: STS GetSessionToken is for temporary credentials, not session state persistence.
A company offers a food delivery service that is growing rapidly. Because of the growth, the company’s order processing system is experiencing scaling problems during peak traffic hours. The current architecture includes the following:• A group of Amazon EC2 instances that run in an Amazon EC2 Auto Scaling group to collect orders from the application• Another group of EC2 instances that run in an Amazon EC2 Auto Scaling group to fulfill ordersThe order collection process occurs quickly, but the order fulfillment process can take longer. Data must not be lost because of a scaling event.A solutions architect must ensure that the order collection process and the order fulfillment process can both scale properly during peak traffic hours. The solution must optimize utilization of the company’s AWS resources.Which solution meets these requirements?
The correct answer is D because using two SQS queues decouples order collection from fulfillment, preventing data loss during scale events, and a backlog-per-instance metric directly ties scaling to work remaining, ensuring proper capacity while optimizing resource use. It avoids underutilization by scaling on actual workload rather than fixed CPU thresholds.A) This relies on CPU-based scaling, which may not reflect queue depth or backlogs and can lead to throttling or delays during I/O-bound fulfillment. B) SNS notifications to create new ASGs is less deterministic and can cause thrashing or orphaned instances without considering backlog. C) Polling without a backlog-based metric risks over- or under-provisioning and may still not reflect per-instance load.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.