Master AWS Certifications with Confidence

Basic Support

Developer Support

Business Support

Enterprise Support

Physical security of data centers

Encryption of customer-stored data

Configuration of guest operating systems

Maintenance of network infrastructure

Management of IAM user policies

Attach service control policies (SCPs) to the root of the organization to block specific SQL query patterns.

Enable the Amazon RDS Protection feature in Amazon GuardDuty for the member accounts of the organization.

Publish the Aurora general logs to a log group in Amazon CloudWatch Logs. Export the log data to a central Amazon S3 bucket and analyze it using Amazon Athena.

Configure AWS CloudTrail to monitor all database API calls and export the logs to a central Amazon S3 bucket.

Use Amazon SQS to queue tasks. Deploy worker nodes as EC2 instances in an Auto Scaling group with scheduled scaling policies.

Use Amazon SQS to queue tasks. Deploy worker nodes as EC2 instances in an Auto Scaling group that scales based on the SQS queue length.

Deploy master and worker nodes as EC2 instances in Auto Scaling groups. Use AWS CloudTrail to log tasks and scale workers based on master's CPU usage.

Deploy master and worker nodes as EC2 instances in Auto Scaling groups. Use Amazon Kinesis Data Streams for task distribution and scale workers based on network throughput.

Create an S3 event notification on all S3 buckets for the PutBucketPolicy event. Select the SNS topic as the target for the event notifications.

Create an analyzer in AWS Identity and Access Management Access Analyzer. Create an Amazon EventBridge rule for the event type 'Access Analyzer Finding' with a filter for 'isPublic:false.' Select the SNS topic as the EventBridge rule target.

Create an Amazon EventBridge rule for the event type 'Bucket-Level API Call via CloudTrail' with a filter for 'PutBucketAcl.' Select the SNS topic as the EventBridge rule target.

Activate AWS Config and add the s3-bucket-public-read-prohibited rule. Create an Amazon EventBridge rule for the event type 'Config Rules Compliance Change' with a filter for 'NON_COMPLIANT.' Select the SNS topic as the EventBridge rule target.

Create a security group for CloudFront and update the ALB's security group ingress rules to allow traffic only from the CloudFront security group.

Update the ALB security group ingress rules to allow access only from the com.amazonaws.global.cloudfront.origin-facing CloudFront managed prefix list.

Change the ALB scheme from internet-facing to internal and create a VPC interface endpoint for Elastic Load Balancing.

Extract CloudFront IP ranges from the AWS ip-ranges.json document and update the ALB security group ingress rules to allow only those IPs.

Modify the IAM instance profile associated with the EC2 instance to grant the S3:* permission for the S3 bucket.

Modify the IAM instance profile associated with the EC2 instance to grant the S3:ListBucket permission for the S3 bucket.

Update the developer's IAM user policy to include the S3:ListBucket permission for the S3 bucket.

Modify the S3 bucket policy to include the S3:ListBucket permission, specifying the EC2 instance's account number in the Principal element.

Add a filter step to the pipe that will match on a processing status of processed.

Update the Lambda function to return only files that have a status of processed.

Include a filter for a status of processed in all EventBridge rules that subscribe to the event bus.

Add an input transformer to the pipe output that filters files that have a status of processed.