What is the recommended approach for handling A banking company is building an application for users to create ?
API Gateway's canary deployments allow gradual traffic shifting to a new version of a function, minimizing disruption while testing.
Why Option A is Correct:
Gradual Rollout: Reduces risk by incrementally increasing traffic.
Rollback Support: Canary deployments make it easy to revert to the previous version.
Why Not Other Options:
Option B: Redeploying the stage disrupts all users.
Option C & D: Managing new stages and weighted routing introduces unnecessary complexity.
An 1AM role is attached to an Amazon EC2 instance that explicitly denies access to all Amazon S3 API actions. The EC2 instance credentials file specifies the 1AM access key and secret access key, which allow full administrative access.
Given that multiple modes of 1AM access are present for this EC2 instance, which of the following is correct?
A developer is using an AWS Lambda function to generate avatars for profile pictures that are uploaded to an Amazon S3 bucket. The Lambda function is automatically invoked for profile pictures that are saved under the /original/ S3 prefix. The developer notices that some pictures cause the Lambda function to time out. The developer wants to implement a fallback mechanism by using another Lambda function that resizes the profile picture.
Which solution will meet these requirements with the LEAST development effort?
The solution that will meet the requirements with the least development effort is to set the image resize Lambda function as a destination of the avatar generator Lambda function for the events that fail processing. This way, the fallback mechanism is automatically triggered by the Lambda service without requiring any additional components or configuration. The other options involve creating and managing additional resources such as queues, topics, state machines, or rules, which would increase the complexity and cost of the solution.
A healthcare company is developing a multi-tier web application to manage patient records that are in an Amazon Aurora PostgreSQL database cluster. The company stores the application code in a Git repository and deploys the code to Amazon EC2 instances.
The application must comply with security policies and follow the principle of least privilege. The company must securely manage database credentials and API keys within the application code. The company must have the ability to rotate encryption keys on demand.
Which solution will meet these requirements?
Requirement Summary:
Multi-tier app on EC2 + Aurora PostgreSQL
Must comply with least privilege and security policies
Need to manage credentials and API keys securely
Must support key rotation on demand
Evaluate Options:
A . Secrets Manager + AWS managed KMS keys
Best practice for secure secret storage
Supports auto rotation
Uses AWS SDK to fetch at runtime (secure, avoids hardcoding)
AWS managed keys are rotated automatically and easier to manage
B . Secrets Manager + customer managed keys
Also valid, but adds complexity
Since the question asks for LEAST development effort, AWS-managed keys are preferred
C . Store secrets in code
Violates all security best practices
D . Use SSM Parameter Store + AWS managed keys
Possible, but Secrets Manager is preferred when rotation is needed
Parameter Store does not natively rotate secrets
Secrets Manager: https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html
Automatic key rotation: https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html
A developer created an AWS Lambda function to process data in an application. The function pulls large objects from an Amazon S3 bucket, processes the data, and loads the processed data into a second S3 bucket. Application users have reported slow response times. The developer checks the logs and finds that Lambda function invocations run much slower than expected. The function itself is simple and has a small deployment package. The function initializes quickly. The developer needs to improve the performance of the application. Which solution will meet this requirement with the LEAST operational overhead?
Configuring the Lambda function to use ephemeral storage and processing data in the /tmp directory improves performance by leveraging local storage during execution.
Why Option C is Correct:
Ephemeral Storage: Lambda provides temporary storage (up to 10 GB) in the /tmp directory for each invocation, which is faster than pulling data directly from S3 multiple times.
Performance Boost: Data can be downloaded to /tmp, processed locally, and uploaded to the destination S3 bucket, minimizing S3 network calls.
Low Overhead: This approach requires only minimal changes to the function's configuration.
Why Not Other Options:
Option A: Using Amazon EFS adds complexity and is unnecessary for this use case.
Option B: Scheduling the function does not address the root cause of slow performance.
Option D: Lambda layers improve deployment efficiency, not runtime performance for this scenario.
Lawrence
4 days agoArlyne
11 days agoVeronika
20 days agoAn
27 days agoChristiane
1 month agoTonette
1 month agoAnjelica
2 months agoAleisha
2 months agoArminda
2 months agoReita
2 months agoLaticia
3 months agoLenna
3 months agoGregg
3 months agoElvera
3 months agoAudry
4 months agoShalon
4 months agoChau
4 months agoTwana
5 months agoAudra
5 months agoJohana
5 months agoDalene
5 months agoCarline
6 months agoHoney
6 months agoLayla
8 months agoBettina
9 months agoVashti
10 months agoAileen
11 months agoStevie
1 year agoLeonida
1 year agoWalker
1 year agoLenna
1 year agoDonte
1 year agoCasey
1 year agoNilsa
1 year agoTasia
1 year agoToi
1 year agoSabra
1 year agoAvery
1 year agoDyan
1 year agoEve
1 year agoSolange
1 year agoErick
1 year agoTeddy
1 year agoColeen
2 years agoIlona
2 years agoAn
2 years agoLavera
2 years agoEdwin
2 years agoKaitlyn
2 years agoCordelia
2 years agoTroy
2 years agoClorinda
2 years ago