Master AWS Certifications with Confidence

Dedicated Hosts

AWS Storage Gateway

AWS Fargate

AWS Outposts

AWS Cloud Adoption Framework (AWS CAF)

AWS Managed Services (AMS)

AWS Well-Architected Framework

AWS Migration Hub

Create an IAM policy with fine-grained permissions to restrict access to specific columns and rows in Lake Formation tables.

Use Lake Formation data filters to enforce column-level security and row-level security on the ingested data.

Develop an AWS Glue ETL job to redact sensitive data before storing it in the data lake.

Implement an Amazon Athena query that dynamically masks sensitive data during user queries.

Use AWS CloudMap to register pod IP addresses within the custom subnets and enforce security groups.

Set up an AWS Site-to-Site VPN to connect the on-premises network to the EKS cluster's custom subnets.

Deploy the Amazon VPC CNI plugin and specify the custom subnets in the VPC for pod networking.

Apply Kubernetes taints and tolerations to ensure pods are scheduled on nodes in the correct subnets.

Create a second ALB and deploy the new version to EC2 instances in a new Auto Scaling group. Update the Route 53 record to use weighted routing with 15% traffic directed to the new ALB. Configure session stickiness on both ALBs.

Create a new target group for the ALB and deploy the updated version to EC2 instances in this target group. Configure the ALB listener rule to route 15% of traffic to the new target group. Enable target group stickiness on the ALB.

Modify the existing Auto Scaling group's launch template to include the new version. Use an instance refresh with a 15% minimum healthy percentage to gradually replace instances. Enable ALB connection draining.

Deploy the new version to a separate Auto Scaling group and register it with the ALB. Adjust the ALB's routing algorithm to weighted least connections with 15% weight assigned to the new group. Enable session stickiness on the ALB.

Enable automatic scanning on push in ECR. Configure an Amazon EventBridge rule to trigger an AWS Lambda function when a scan finds Critical or High severity findings. The Lambda function deletes the image tag and sends a notification using Amazon SNS.

Set up a daily scheduled scan using AWS Systems Manager. Use an EventBridge rule to invoke an AWS Step Functions workflow when the scan completes. The workflow deletes the image tag if vulnerabilities are found and notifies via Amazon SES.

Configure ECR to scan images on push and send results to an Amazon SQS queue. Use a Lambda function to process messages from the queue, delete tags for severe findings, and notify using Amazon SNS.

Use AWS Config to monitor ECR repositories. When a new image is pushed, trigger a Lambda function to perform a manual scan, delete the tag if needed, and send an email via Amazon SES.

Stream the CloudFront distribution logs to an Amazon S3 bucket. Detect anomalies and error rates by using Amazon Athena.

Enable real-time logs on the CloudFront distribution. Create a data stream in Amazon Kinesis Data Streams.

Set up Amazon Kinesis Data Firehose to send the logs to Amazon OpenSearch Service. Make a dashboard in OpenSearch Dashboards.

Stream the CloudFront distribution logs to Amazon Kinesis Data Firehose.

Set up Amazon Kinesis Data Firehose to send the logs to AWS CloudTrail. Create CloudTrail metrics, alarms, and dashboards.

Use AWS Elastic Beanstalk to manage application versions and environments.

Use a function alias pointing to different versions.

Store each version in Amazon EFS and update the function configuration manually.

Implement AWS CloudFormation to roll back infrastructure changes.