Master AWS Certifications with Confidence

Automatically scaling the number of EC2 instances based on demand.

Distributing incoming application traffic across multiple targets.

Enabling cross-region load balancing for global applications.

Managing traffic routing between multiple virtual private clouds.

AWS IoT Core

Amazon Lightsail

AWS Storage Gateway

AWS Snowball Edge

Create a security group with a rule to allow TCP port 80 from source 0.0.0.0/0.

Create a security group with a rule to allow TCP port 80 to destination 0.0.0.0/0.

Update the network ACL to allow TCP port 80 from source 0.0.0.0/0.

Update the network ACL to allow inbound/outbound TCP port 80 from source 0.0.0.0/0 and to destination 0.0.0.0/0.

Update the network ACL to allow inbound TCP port 80 from source 0.0.0.0/0 and outbound TCP port 32768-65535 to destination 0.0.0.0/0.

Enable S3 logging in the Systems Manager console. Choose an S3 bucket to send the Run Command logs to.

Install the Amazon CloudWatch agent. Push all logs to a CloudWatch log group. Export the logs to an S3 bucket from the group for archival purposes.

Create a Systems Manager document to upload all Run Command logs to a central S3 bucket. Use Amazon EventBridge to run the document against all instances daily.

Install an Amazon CloudWatch agent. Push all logs to a CloudWatch log group. Create a CloudWatch logs subscription that pushes any incoming log events to an Amazon Kinesis Data Firehose delivery stream. Set Amazon S3 as the destination.

Create a Direct Connect gateway in the central account. In each account, create a virtual private gateway and associate it with the Direct Connect gateway via an association proposal.

Set up a Direct Connect gateway and transit gateway in the central account. Link them using a transit VIF.

Deploy an internet gateway in each VPC and update route tables to direct internet traffic through it.

Use AWS Resource Access Manager to share the transit gateway with other accounts. Attach all VPCs to the shared transit gateway.

Establish VPC peering connections between all VPCs.

Configure VPC route tables to send default traffic to the transit gateway. Set up on-premises NAT gateways to handle internet traffic.

Configure an AWS Client VPN endpoint associated with the VPC, set up a self-service portal, and instruct developers to connect using the VPN client.

Create a transit gateway connected to the VPC, establish an AWS Site-to-Site VPN, and instruct developers to use an OpenVPN client.

Order an AWS Direct Connect connection with a public VIF, associate it with a transit gateway, and instruct developers to connect via Direct Connect.

Deploy a bastion host in a public subnet, configure its security group to allow SSH access from company IP ranges, and instruct developers to connect via SSH tunneling.

Create a new Lambda function version and reference it in the CloudFormation template before updating the stack.

Modify the S3 object version or change the S3 object key in the CloudFormation template before updating the stack.

Upload the updated ZIP file to a different S3 bucket and update the bucket reference in the CloudFormation template.

Enable automatic code versioning for the Lambda function in the CloudFormation template before updating the stack.

Create a CloudFormation template that provisions a Kinesis stream and deploys the Lambda function. Build the stack during CI/CD, invoke the function, and validate the results.

Configure a test Kinesis stream. Use a test that reads records from the stream during the CI/CD process to validate the function's behavior.

Integrate a test Kinesis stream into the application's unit tests. Execute these tests during the CI/CD pipeline.

Use the AWS lambda invoke command with a simulated Kinesis event payload during the CI/CD process to test the function.