CloudF and Accelerator

An application with global users across AWS Regions had suffered an issue when the Elastic Load Balancer (ELB) in a Region malfunctioned thereby taking down the traffic with it. The manual intervention cost the company significant time and resulted in major revenue loss.

What should a solutions architect recommend to reduce internet latency and add automatic failover across AWS Regions?

• Set up AWS Direct Connect as the backbone for each of the AWS Regions where the application is deployed

• Set up AWS Global Accelerator and add endpoints to cater to users in different geographic locations

• Create S3 buckets in different AWS Regions and configure CloudFront to pick the nearest edge location to the user

• Set up an Amazon Route 53 geoproximity routing policy to route traffic

Reporters at a news agency upload/download video files (about 500MB each) to/from an S3 bucket as part of their daily work. As the agency has started offices in remote locations, it has resulted in poor latency for uploading and accessing data to/from S3. The agency wants to continue using S3 but wants to improve the performance.

As a solutions architect, which of the following solutions do you propose to address this issue? (Select two)

• Use Amazon CloudFront distribution with origin as the S3 bucket. This would speed up uploads as well as downloads for the video files

• Enable Amazon S3 Transfer Acceleration for the S3 bucket. This would speed up uploads as well as downloads for the video files

• Create new S3 buckets in every region where the agency has a remote office, so that each office can maintain its storage for the media assets

• Move S3 data into EFS file system created in a US region, connect to EFS file system from EC2 instances in other AWS regions using an inter-region VPC peering connection

• Spin up EC2 instances in each region where the agency has a remote office. Create a daily job to transfer S3 data into EBS volumes attached to the EC2 instances

A global media company uses a fleet of EC2 instances (behind an Application Load Balancer) to power its video streaming application. To improve the performance of the application, the engineering team has also created a CloudFront distribution with the Application Load Balancer as the custom origin. The security team at the company has noticed a spike in the number and types of SQL injection and cross-site scripting attack vectors on the application.

As a solutions architect, which of the following solutions would you recommend as the MOST effective in countering these malicious attacks?

• Use Web Application Firewall (WAF) with CloudFront distribution

• Use Route 53 with CloudFront distribution

• Use Security Hub with CloudFront distribution

• Use AWS Firewall Manager with CloudFront distribution

Which is true about AWS Global Accelerator?

• Leverage the AWS internal network to route to your application

• 2 Anycast IP are created for your application

• The Anycast IP send traffic directly to Edge Locations

• The Edge locations send the traffic to your application

What is the benefits of CloudFront?

• Improves performance for both cacheable content (such as images and videos)

• Dynamic content (such as API acceleration and dynamic site delivery)

• Content is served at the edge

• Good for HTTP use cases that require static IP addresses

Global Accelerator is good for?

• Improves performance for a wide range of applications over TCP or UDP

• Proxying packets at the edge to applications running in one or more AWS Regions

• Good fit for non-HTTP use cases, such as gaming (UDP), IoT (MQTT), or Voice over IP

• Good for HTTP use cases that require static IP addresses

• Good for HTTP use cases that required deterministic, fast regional failover