Arquitecto prueba corta 24p

A company needs to analyze log files stored in JSON format in an S3 bucket. Queries will be simple and on-demand. A solutions architect must meet these needs with minimal changes and overhead.

• Use Amazon Redshift to load the logs and run SQL queries as needed.
• Use Amazon CloudWatch Logs to store logs. Run SQL queries from the CloudWatch console.
• Use Amazon Athena directly with S3 to run queries on-demand.
• Use AWS Glue to catalog logs and run SQL queries with a transient Spark cluster on Amazon EMR

A company collects 500 GB/day of temperature, humidity, and pressure data across multiple continents. It wants to aggregate all data quickly into one S3 bucket, minimizing operational complexity

• Enable S3 Transfer Acceleration on the destination bucket. Use multipart uploads to directly upload data to it.
• Upload data to a nearby S3 bucket, then use Cross-Region Replication to copy it to the destination bucket. Delete from the origin.
• Use Snowball Edge daily to transfer data to a nearby region. Replicate to the destination bucket using Cross-Region Replication.
• Upload data to a nearby EC2 instance. Store in EBS, create snapshots regularly, and restore them in the destination region.

A company’s EC2 instances use an Aurora database with credentials stored locally. The company wants to reduce the operational overhead of managing these credentials.

• Use AWS Secrets Manager and enable automatic credential rotation.
• Use AWS Systems Manager Parameter Store with automatic rotation enabled.
• Store encrypted credentials in an S3 bucket using AWS KMS. Point the app to the bucket.
• Create encrypted EBS volumes for each EC2 instance, migrate credentials to the new volumes, and point the app to them

A global company hosts its web app on EC2 behind an ALB. Static data is in S3, and they want to improve performance and reduce latency for static and dynamic content. They use Route 53 for their domain.

• Create a CloudFront distribution with S3 as origin and a Global Accelerator with ALB and CloudFront as endpoints, using a custom domain for the web app
• Create a CloudFront distribution with ALB as the origin and a Global Accelerator with S3 as the endpoint, routing Route 53 traffic to CloudFront
• Create a CloudFront distribution with S3 and ALB as origins and configure Route 53 to route traffic to CloudFront
• Create a CloudFront distribution with ALB as origin and a Global Accelerator with S3 as the endpoint, using two domains, one for CloudFront (dynamic) and another for Global Accelerator (static).

A company needs to rotate credentials for its Amazon RDS for MySQL databases across multiple AWS Regions during monthly maintenance with minimal operational overhead.

• Store the credentials as secrets in AWS Secrets Manager, use multi-Region secret replication, and configure Secrets Manager to rotate the secrets on a schedule
• Store the credentials as secure string parameters in AWS Systems Manager, use multi-Region replication, and configure Systems Manager to rotate the secrets on a schedule
• Store the credentials in an S3 bucket with SSE enabled and use EventBridge to invoke a Lambda function to rotate them
• Encrypt the credentials using KMS multi-Region keys, store them in a DynamoDB global table, and use a Lambda function and the RDS API to rotate the secrets.

A company migrated to AWS and needs to protect traffic in and out of the production VPC by replicating its on-premises inspection and filtering functionalities in the AWS Cloud.

• Use Amazon GuardDuty to inspect and filter traffic in the production VPC
• Use Traffic Mirroring to mirror VPC traffic for inspection and filtering
• Use AWS Network Firewall to create rules for inspecting and filtering VPC traffic
• Use AWS Firewall Manager to create inspection and filtering rules for the production VPC.

A company hosts a data lake on AWS with data in S3 and RDS for PostgreSQL. They need a reporting solution for data visualization that integrates all data sources. Management should have full access, while the rest of the company gets limited access.

• Create an analysis in Amazon QuickSight, connect data sources, and create datasets. Publish dashboards and share them with the appropriate users and groups
• Create an analysis in Amazon QuickSight, connect data sources, and create datasets. Publish dashboards and share them with IAM roles
• Create an AWS Glue table and crawler for S3 data, run ETL jobs, and publish reports to S3 with restricted access using S3 policies
• Create an AWS Glue table and crawler, use Athena Federated Query for RDS data, generate reports with Athena, and limit access via S3 bucket policies.

A company needs to ensure that two Amazon EC2 instances can access an Amazon S3 bucket used for document storage.

• Create an IAM role that grants access to the S3 bucket. Attach the role to the EC2 instances
• Create an IAM policy that grants access to the S3 bucket. Attach the policy to the EC2 instances
• Create an IAM group that grants access to the S3 bucket. Attach the group to the EC2 instances
• Create an IAM user that grants access to the S3 bucket. Attach the user account to the EC2 instances

A company needs to quickly clone large amounts of production data from Amazon EBS volumes into a test environment in the same AWS Region. The cloned data must not affect production, and the software requires high I/O performance. For the minimum time to clone the prod data into the test environment:

• Take EBS snapshots of the production EBS volumes. Restore the snapshots onto EC2 instance store volumes
• Configure the production EBS volumes to use Multi-Attach. Take snapshots and attach the production EBS volumes to test EC2 instances
• Take EBS snapshots. Create and initialize new EBS volumes, attach to test EC2 instances, then restore from snapshots
• Take EBS snapshots. Turn on fast snapshot restore, then restore snapshots into new EBS volumes and attach to test EC2 instances.

An ecommerce company wants to launch a one-deal-a-day website on AWS, handling millions of requests per hour with millisecond latency and minimal operational overhead.

• Use Amazon S3 to host the full website in S3 buckets with CloudFront, and store order data in S3
• Deploy the website on EC2 instances in Auto Scaling groups across multiple Availability Zones, use ALBs for traffic, and store data in RDS MySQL
• Migrate the app to containers on Amazon EKS, use Kubernetes Cluster Autoscaler for scaling, and store data in RDS MySQL
• Use Amazon S3 to host the static content with CloudFront, use API Gateway and Lambda for backend, and store data in DynamoDB.