Master AWS Certifications with Confidence

Cost management

Security

Automated scaling

Reliability

Continuous integration

AWS Compliance Center

AWS Artifact

AWS Config

AWS Inspector

Create an interface VPC endpoint for S3 in the VPC where the EC2 instance resides. Configure the S3 bucket policy to allow access only from the IAM role attached to the EC2 instance.

Set up a gateway VPC endpoint for S3 in the same region as the EC2 instance. Attach a security group to the endpoint that restricts access to the EC2 instance's private IP. Apply a bucket policy allowing access from the EC2 instance's IAM role.

Use AWS PrivateLink to establish a private connection between the EC2 instance and the S3 bucket. Update the VPC route tables to direct S3 traffic through the PrivateLink endpoint. Attach a bucket policy restricting access to the EC2 instance's IAM role.

Configure the EC2 instance to use an S3 VPC endpoint gateway and modify the bucket's policy to allow access only from the VPC endpoint. Add a route in the VPC route table to direct S3 traffic through the gateway endpoint.

Use an Amazon Simple Notification Service (Amazon SNS) topic to distribute data batches. Configure an Auto Scaling group with the launch template, scaling instances based on CPU utilization.

Use an Amazon Simple Queue Service (Amazon SQS) queue to store data batches. Configure an Auto Scaling group with the launch template, scaling instances based on memory utilization.

Use an Amazon Simple Queue Service (Amazon SQS) queue to store data batches. Configure an Auto Scaling group with the launch template, scaling instances based on the ApproximateNumberOfMessagesVisible metric in the SQS queue.

Use an Amazon Simple Notification Service (Amazon SNS) topic to distribute data batches. Configure an Auto Scaling group with the launch template, scaling instances based on the NumberOfMessagesPublished metric in the SNS topic.

Deploy NAT gateways in all Availability Zones. Update route tables to direct traffic through the respective NAT gateways. Modify the RDS for PostgreSQL DB instance to a Multi-AZ deployment. Reconfigure the Auto Scaling group to distribute instances across all Availability Zones. Set the Auto Scaling group's minimum and maximum capacity to 3.

Replace the NAT gateway with an internet gateway. Migrate the RDS for PostgreSQL DB instance to Amazon DynamoDB. Configure the Auto Scaling group to launch instances in multiple Availability Zones. Adjust the Auto Scaling group's minimum and maximum capacity to 3.

Deploy a NAT instance in each Availability Zone. Convert the RDS for PostgreSQL DB instance to a Single-AZ configuration. Launch additional EC2 instances manually in the remaining Availability Zones. Set the Auto Scaling group's capacity to 3.

Add NAT gateways in all Availability Zones. Update route tables accordingly. Enable point-in-time recovery for the RDS for PostgreSQL DB instance. Configure the Auto Scaling group to span multiple Availability Zones but retain the minimum and maximum capacity at 1.

Create an SCP to enforce a quarterly spending limit. Apply the SCP to the sandbox accounts.

Use AWS Budgets to configure a fixed quarterly budget for each sandbox account during account provisioning.

Create an SCP to block access to high-cost services. Apply the SCP to the sandbox accounts.

Develop an IAM policy to restrict access to costly services. Attach the policy to sandbox account roles.

Configure an AWS Budgets action to stop all resources directly when the budget is exceeded.

Set up an AWS Budgets alert to trigger an Amazon SNS notification at the budget threshold. Use AWS Lambda to terminate all sandbox resources.

Use the AWS CodeDeploy in-place deployment configuration for the Lambda functions. Shift all traffic immediately after deployment.

Use the AWS CodeDeploy linear deployment configuration to shift 15% of the traffic every 3 minutes.

Use the AWS CodeDeploy all-at-once deployment configuration to shift all traffic to the updated versions immediately.

Use the AWS CodeDeploy predefined canary deployment configuration to shift 15% of the traffic immediately and shift the remaining traffic after 3 minutes.

AWS CodeBuild

Amazon S3

AWS CodeCommit

AWS Cloud9