Master AWS Certifications with Confidence

Amazon GuardDuty

AWS WAF

Amazon Macie

AWS Shield

Amazon Connect

Amazon Kendra

Amazon Lex

Amazon Comprehend

Develop an AWS Lambda function to create daily snapshots of the EBS volumes and replicate them to another Region.

Use AWS Backup to create a daily backup plan, copy the backups to another Region, and include the EC2 instances as resources.

Use AWS Backup to create a daily backup plan, copy the backups to another Region, and include the EBS volumes as resources.

Develop an AWS Lambda function to create daily snapshots of the EBS volumes and replicate them to another Availability Zone.

Place EC2 instances behind Application Load Balancers (ALBs) in each Region. Configure AWS WAF on each ALB. Use AWS Global Accelerator with the ALBs as endpoints to route traffic through static IPs.

Deploy EC2 instances with Network Load Balancers (NLBs) in each Region. Attach AWS WAF to an Amazon CloudFront distribution. Set up Route 53 with latency-based routing to the NLBs.

Use Application Load Balancers (ALBs) fronting EC2 instances across Regions. Create an Amazon CloudFront distribution with ALB origins and associate AWS WAF. Configure Route 53 with geolocation routing.

Implement Network Load Balancers (NLBs) in each Region. Deploy AWS WAF on the NLBs. Create a Global Accelerator with NLB endpoints and static IPs.

Deploy two IDS appliances in the shared services VPC, each in a different Availability Zone.

Configure a Network Load Balancer in the shared services VPC. Create a target group and register both IDS appliance instances with it.

Deploy a Gateway Load Balancer in the shared services VPC. Create a target group and register both IDS appliance instances with it.

Create a VPC interface endpoint. Update the shared services VPC route table to direct traffic from other VPCs to this endpoint.

Deploy two IDS appliances in the shared services VPC, both in the same Availability Zone.

Create a VPC Gateway Load Balancer endpoint. Update the shared services VPC route table to direct traffic from other VPCs to this endpoint.

Use an Application Load Balancer (ALB) with an ACM certificate, forwarding traffic to instances on port 80. Install a third-party SSL certificate on each instance.

Configure an ALB with an ACM certificate, terminating SSL at the ALB. Set up an HTTPS listener on the ALB forwarding to port 443 on instances, which have a third-party certificate installed.

Deploy a Network Load Balancer (NLB) with an ACM certificate, forwarding traffic to instances using TLS on port 443. Install the same ACM certificate on each instance.

Use CloudFront with an ACM certificate, pointing to an ALB with an HTTP listener. Install a third-party certificate on the ALB.

Integrate a third-party identity provider to issue temporary credentials for AWS resource access.

Use AWS CloudFormation to dynamically provision IAM users for each guest session.

Generate short-lived credentials via AWS STS and embed them directly in the application code.

Configure Amazon Cognito to assign unauthenticated users an IAM role with restricted permissions.

Implement a canary release strategy for the existing API stage. Deploy the updated Lambda function gradually and monitor using the same API endpoint.

Deploy the updated Lambda function to the existing API stage with a new version. Use the existing API URL with a header to route to the new version.

Create a new API stage in API Gateway and configure stage variables to point to the updated Lambda function. Test using the new stage's dedicated URL.

Provision a new API Gateway and Lambda function through AWS CloudFormation, replicating the production setup. Test using the new stack's API endpoint.