Ensure that the right route entry is there in the Route table.

Set an Elastic IP Address to the EC2 Instance.

There must be some issue in the EC2 Instance. Check the system logs.

Set a Secondary Private IP Address to the EC2 Instance.

Store objects in CSV format compressing it with Snappy using server-side encryption. Use Amazon S3 Select to retrieve a subset of data.

Store objects in Apache Parquet format compressing the whole object with GZIP using server-side encryption. Use Amazon S3 Select to retrieve a subset of data.

Store objects in JSON format compressing it with GZIP using server-side encryption. Use Amazon S3 Select to retrieve a subset of data.

Store objects in CSV format compressing it with BZIP2 without any encryption. Use Amazon S3 Select to retrieve a subset of data.

Store the digital content as a private S3 bucket, use OAI and restrict bucket access with signed URL in CloudFront

Store the digital contents on S3 bucket and use signed URL for the users to deliver the contents through CloudFront

Store the digital contents on S3 bucket and use signed URLs to access S3 through CloudFront

Store the digital contents as private objects in S3 buckets and use OAI to deliver the content through CloudFront

The network interfaces need to initialized again.

The public IP addresses need to be associated with the ENI again.

The Route 53 hosted zone needs to be restarted.

The public IP addresses have changed after the instance was stopped and started again.

AWS Single Sign-On

Service Catalog

Resource Access Manager

IAM

Amazon Simple Notification Service

Amazon Simple Email Service

Amazon CloudWatch

Amazon Route 53

Amazon Simple Queue Service

2

6

3

4

Amazon Kinesis

Amazon AppStream

Amazon Simple Queue Service

AWS Data Pipeline

Purchase a Standard RI.

Purchase an EC2 instance saving plan.

Purchase a Compute Saving plan.

Purchase a Convertible RI.

FSx for Lustre.

FSx for Windows File Server.

DynamoDB Accelerator.

EFS.

Adding CORS automatically removes the S3 ACL and bucket policies

HTTPS must contain a specific port in the request, e.g. https:// domainnameb.com:443

Both request https://domainnameb.com and http://www.domainnameb.com:80 don't match the allowed in configuration.

There’s a limit of two origin sites per S3 bucket allowed

AWS Storage Gateway

VM Import/Export

DB Migration Service

AWS Import/Export

Place the instances into a spread placement group that can span multiple Availability Zones in the same Region

Place the instances into partitions placement group to evenly distribute the instances across partitions

Place the instances into a spread placement group that can span multiple Availability Zones in the multiple Regions

Place the instances into a cluster placement group that can span across multiple Availability Zones

In the AWS console, select the member account and migrate it to the destination AWS Organization.

In the AWS console, drag and drop this account from one Organization to another.

Remove the account in the old Organization. Send an invite from the new Organization and accept the invite from the member account.

Delete the old AWS Organization. Send an invite from the new Organization and accept the invite for the member account.

Immediately after a reboot of the EC2 Instances, belonging to that security group.

 It will take 60 seconds for the rules to apply to all Availability Zones within the region.

Changes apply instantly to the security group, and the application should be able to respond to 443 requests.

Generally, it takes 2-5 minutes for the rules to propagate.

Use the ELB launch type in AWS ECS.

Use the EC2 launch type in AWS ECS.

Use the Fargate launch type in AWS ECS.

Use the Auto Scaling launch type in AWS ECS.

It is allowed because the Root has the default SCP that allows all actions.

It is permitted because the SCP in Dev_OU allows it.

It is not allowed as the SCP in Project_OU restricts the action.

It is not allowed as the default SCP in Root denies the action.

Define the tags on the Development and production servers and add a condition to the IAM Policy which allows access to specific tags.

Launch the development and production instances in separate VPCs and use VPC Peering.

Launch the development and production instances in different Availability Zones and use Multi-Factor Authentication.

Create an IAM group with a condition that allows access to only those instances which are used for production or development.

SQS synchronously provides transcoding output.

SQS checks the health of the worker instances.

SQS guarantees the order of the messages.

SQS helps to facilitate horizontal scaling of EC2 worker instances when the queue grows.

Use ElastiCache in front of the database.

Add read replica to the primary database to offload read traffic.

Use Amazon DynamoDB to offload all the reads. Populate the common read items in a separate table.

Use AWS CloudFront in front of the database.

AWS Migration Hub.

AWS Database Migration Service.

AWS Server Migration Service.

AWS Server Migration Service Connector.

AWS DataSync.

Create an S3 bucket. Use an S3 Connector and mount it as an iSCSI device.

Use the EFS file service and mount the different file systems to the on-premises servers.

Create a Glacier vault. Use a Glacier Connector and mount it as an iSCSI device.

Use the AWS Storage Gateway-cached volumes service.

Add a Scheduled Scaling Policy at 8:30 AM.

Create another Dynamic Scaling Policy to ensure that the scaling happens at 9:00 AM.

Add another Auto Scaling group to support the current one.

Change the Cool Down Timers for the existing Auto Scaling Group.

AWS Managed Microsoft AD can only be used for cloud or on-premises environments, not both

AWS Managed Microsoft AD requires data synchronization and replication to work properly

AWS Managed Microsoft AD is 100% the same as Active Directory running on separate EC2 instance

AWS Managed Microsoft AD can be used as the Active Directory over VPN or Direct Connect

Ensure the Network Access Control Lists allow Inbound SSH traffic from the IT Administrator’s Workstation.

Ensure that the security group allows Outbound SSH traffic from the IT Administrator’s Workstation.

Ensure that the security group allows Inbound SSH traffic from the IT Administrator’s Workstation.

Ensure the Network Access Control Lists allow Outbound SSH traffic from the IT Administrator’s Workstation.

AWS ECS

AWS Config

AWS API Gateway

AWS Lambda

Consider using DynamoDB instead of AWS RDS.

Use SNS to send notification on missed database writes and then add them manually at a later stage.

Add more IOPS to the existing EBS Volume used by the database.

Use SQS to queue the database writes.

Use EC2 Config to install the Web and Application servers when the instances are launched.

Use Auto Scaling Groups to install the Web and Application servers when the instances are launched.

Ask the Development team to create scripts which can be added to the Meta Data section when the instance is launched.

Ask the Development team to create scripts which can be added to the User Data section when the instance is launched.

Define the metadata for the different layers in DynamoDB.

Use AWS OpsWorks to define the different layers for your application.

Use EC2 tags to define different stack layers for your resources.

Use AWS Config to define the different layers for your application.