Master AWS Certifications with Confidence

Cost of the underlying EC2 instance hardware

Cost of cooling systems in AWS data centers

Cost of the web application's third-party middleware licenses

Cost of physical server maintenance at AWS facilities

AWS CloudShell

AWS Command Line Interface (CLI)

AWS Management Console

AWS CloudFormation

Store the API keys in AWS Systems Manager Parameter Store. Use AWS CloudFormation and the GetSecretValue API to retrieve the API keys from Parameter Store.

Store the API keys in AWS Secrets Manager. Use AWS CloudFormation and AWS Lambda with the GetSecretValue API to retrieve the API keys from Secrets Manager.

Store the API keys in AWS Systems Manager Parameter Store. Use AWS CloudFormation and AWS Lambda with the GetSecretValue API to retrieve the API keys from Parameter Store.

Store the API keys in AWS Secrets Manager. Use AWS CloudFormation and the GetSecretValue API to retrieve the API keys from Secrets Manager.

Configure a DynamoDB interface endpoint. Create a security group allowing outbound traffic to DynamoDB.

Configure a DynamoDB gateway endpoint. Update the VPC route tables to route traffic through the endpoint.

Apply a DynamoDB resource policy that permits access from the Elastic IP address assigned to the NAT gateway.

Provision a second NAT gateway in the same subnet as the backend service and adjust the VPC route tables.

Upgrade to AWS Enterprise Support to access advanced operational and technical guidance.

Enable AWS Trusted Advisor and analyze the 'Idle EC2 Instances' recommendations.

Deploy the Amazon CloudWatch agent on EC2 instances and enable memory usage monitoring.

Activate AWS Compute Optimizer in the account to generate instance optimization insights.

Purchase Reserved Instances for the required instance types and regions to reduce costs.

Create an SCP to enforce a quarterly spending limit. Apply the SCP to the sandbox accounts.

Use AWS Budgets to configure a fixed quarterly budget for each sandbox account during account provisioning.

Create an SCP to block access to high-cost services. Apply the SCP to the sandbox accounts.

Develop an IAM policy to restrict access to costly services. Attach the policy to sandbox account roles.

Configure an AWS Budgets action to stop all resources directly when the budget is exceeded.

Set up an AWS Budgets alert to trigger an Amazon SNS notification at the budget threshold. Use AWS Lambda to terminate all sandbox resources.

Use the SSM dynamic reference.

Use the GetAtt intrinsic function.

Use the Fn::ImportValue intrinsic function.

Use the SecretsManager dynamic reference.

Set up an Amazon API Gateway HTTP API with a default route that returns cached responses from previous third-party API calls.

Configure an AWS AppSync API with a resolver that maps to a mock data source using sample responses from the third-party APIs.

Create an AWS Lambda function that returns predefined responses matching the third-party APIs and configure an Amazon API Gateway to route requests to this Lambda.

Set up an Amazon API Gateway REST API for each third-party API, configure mock integrations with integration responses using sample data captured from the real APIs.