Master AWS Certifications with Confidence

Prioritize vertical scaling over horizontal scaling.

Use tightly integrated components to minimize latency.

Implement a single point of failure for simplicity.

Design systems to scale horizontally using modular components.

Use Amazon EC2 Instance Connect.

Use AWS Direct Connect.

Use AWS Cloud9.

Use AWS Systems Manager Session Manager.

Use Amazon API Gateway.

Enable S3 versioning for the bucket and configure a lifecycle policy to delete objects after five years.

Activate S3 Object Lock on the audit logs and use governance mode.

Activate S3 Object Lock on the audit logs and use compliance mode.

Apply an S3 Lifecycle policy to transition the logs to S3 Glacier Deep Archive for the five-year retention period.

Configure the API to send data to Amazon Kinesis Data Firehose for delivery to Amazon S3.

Use Amazon SES to format the report and send emails.

Schedule an AWS Glue job via Amazon EventBridge to fetch data from the API.

Use Amazon EventBridge to trigger a Lambda function that retrieves data from the API.

Store data in Amazon S3 and use an SNS topic to notify subscribers via email.

Create an organization in AWS Organizations. Set up AWS Control Tower and enable the strongly recommended guardrails. Enroll all accounts into the organization and organize them into appropriate organizational units (OUs).

Use the AWS CLI to identify all unencrypted RDS instances across all accounts. Execute a script to modify each instance to enable encryption without downtime.

For each unencrypted RDS instance, create a snapshot, encrypt the snapshot during copy, restore the encrypted snapshot as a new RDS instance, and replace the original instance with the new encrypted one.

Enable AWS Config in all accounts and configure a managed rule to check for unencrypted RDS instances. Use Amazon SNS to notify administrators when non-compliant instances are detected.

Implement AWS CloudTrail logging across all accounts. Create an Amazon EventBridge rule that triggers an AWS Lambda function to encrypt any newly created unencrypted RDS instances.

Configure the application to connect to Amazon SES using TLS encryption. Create an IAM role with ses:SendEmail and ses:SendRawEmail permissions and attach it to an Amazon EC2 instance.

Configure the application to connect to Amazon SES using STARTTLS. Generate Amazon SES SMTP credentials and use them to authenticate with Amazon SES.

Modify the application to use the SES API. Create an IAM role with ses:SendEmail and ses:SendRawEmail permissions and assign it as a service role for Amazon SES.

Update the application to use AWS SDKs. Create an IAM user for Amazon SES, generate API access keys, and use the keys for authentication.

The developer's template does not use the Ref intrinsic function to refer to the security groups.

The developer's template does not use the ImportValue intrinsic function to refer to the security groups.

The Mappings section of the developer's template does not refer to the security groups.

The security team's template does not export the security groups in the Outputs section.

The security team's template does not export the security groups in the Mappings section.

Configure mock integrations for the API Gateway HTTP API methods.

Deploy a Lambda function integrated with API Gateway to generate mock responses.

Create new API routes in the API Gateway stage with static mock responses.

Set up a proxy integration for the API Gateway HTTP API methods.