Master AWS Certifications with Confidence

Managing encryption of data within the database

Ensuring physical security of the underlying infrastructure

Applying user-defined access policies to the database

Configuring database connection timeout settings

Encrypting data at rest within Amazon EC2 instances.

Configuring network access rules for Amazon RDS instances.

Ensuring the physical security of AWS global infrastructure.

Managing user authentication for applications hosted on AWS.

Deploy a DynamoDB Accelerator (DAX) cluster to cache frequently accessed metadata from the DynamoDB table.

Implement an Amazon API Gateway API to throttle and manage incoming upload requests to the web application.

Use Amazon CloudFront to distribute the video thumbnails and reduce latency for users.

Create an Auto Scaling group for the processing application. Configure scaling policies based on the SQS queue depth to handle increased load.

Use AWS Transfer Family to set up an SFTP server with S3 as the backend storage. This provides a fully managed service with automatic scaling.

Deploy an SFTP server on an EC2 instance in an Auto Scaling group across multiple Availability Zones. Use an Application Load Balancer to distribute traffic and store files in an EFS file system mounted on the instances, which syncs to S3.

Configure Amazon API Gateway to accept SFTP transfers, triggering an AWS Lambda function to process and store the files directly into S3.

Use a third-party SFTP solution from AWS Marketplace hosted on EC2 instances behind a Network Load Balancer, with instances storing files temporarily before transferring to S3.

Use an SCP to block resource creation unless the required tags are present. Create tag policies specifying the allowed values for each OU. Attach the tag policies to the corresponding OUs.

Use an SCP to block resource creation unless the required tags are present. Create tag policies specifying the allowed values for each OU. Attach the tag policies to the organization's root.

Use an SCP to permit resource creation only when the required tags are present. Create tag policies specifying the allowed values for each OU. Attach the tag policies to the corresponding OUs.

Use an SCP to block resource creation unless the required tags are present. Define the allowed tag values directly in the SCP. Attach the SCP to the OUs.

Create read replicas for Amazon Aurora MySQL and direct read traffic to the writer endpoint in the web application to reduce load on the primary database instance.

Modify the target group health check to point to a static maintenance page and configure Amazon Route 53 health checks to monitor the checkout page for full application functionality. Implement Amazon CloudWatch alarms to alert administrators of failures.

Update the target group health check to use a TCP check on the EC2 instances and configure Amazon Route 53 health checks against the checkout page. Set up Amazon CloudWatch alarms to trigger notifications during downtime.

Create an Amazon CloudWatch alarm for Aurora MySQL with an action to reboot the database instance during periods of high load.

Deploy an Amazon ElastiCache cluster between the web application and Aurora MySQL to cache frequent read queries and alleviate database load.

{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\"s3:GetObject\"],\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET/*\"\n }\n ]\n}

{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\"s3:\"],\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET/\"\n }\n ]\n}

{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\"s3:GetObject\", \"s3:PutObject\", \"s3:DeleteObject\"],\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET/*\"\n }\n ]\n}

{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET\"\n },\n {\n \"Effect\": \"Deny\",\n \"Action\": [\"s3:GetObject\"],\n \"Resource\": \"arn:aws:s3:::EXAMPLE-DOCS-BUCKET/*\"\n }\n ]\n}

Store the credentials as a secret in AWS Secrets Manager with automatic rotation enabled. Retrieve the secret dynamically at runtime within the Lambda functions using Secrets Manager API calls.

Store the credentials as a secret in AWS Secrets Manager with automatic rotation enabled. Configure the Lambda environment variables to reference the secret ARN using the secretsManagerField property in the function configuration.

Store the credentials as a SecureString parameter in AWS Systems Manager Parameter Store with a rotation policy. Use an Amazon EventBridge rule to trigger a Lambda function that updates all Lambda environment variables when rotation occurs.

Store the credentials as a SecureString parameter in AWS Systems Manager Parameter Store with a rotation policy. Reference the parameter directly in the Lambda function code using the ssm:GetParameter API call at runtime.