Master AWS Certifications with Confidence

AWS Lambda

AWS Fargate

Amazon EC2

AWS Batch

Amazon RDS

Amazon Elastic Block Store (Amazon EBS)

Amazon Elastic File System (Amazon EFS)

Amazon S3

Deploy AWS WAF in front of the ALB and configure appropriate web ACL rules to filter SQL injection attempts.

Modify the ALB's listener rules to inspect SQL queries and block malicious requests.

Enable AWS Shield Standard to protect against SQL injection attacks at the network layer.

Use AWS Config to monitor and automatically remediate SQL injection vulnerabilities.

Create an S3 bucket with S3 Object Lock enabled.

Enable S3 versioning on the bucket.

Configure a default retention period of 45 days for the objects.

Configure an S3 Lifecycle policy to transition objects to Glacier after 45 days.

Configure an S3 Lifecycle policy to expire objects after 45 days.

Configure the archiving tool to tag objects with a 45-day retention tag.

Deploy the Lambda functions outside the VPC. Configure the Neptune security group to allow inbound traffic from the Lambda functions' IP ranges.

Deploy the Lambda functions outside the VPC. Establish a VPC endpoint for Neptune and configure Lambda to access Neptune through this endpoint.

Create three private subnets in the Neptune VPC. Deploy the Lambda functions in these subnets. Set up a VPC endpoint for DynamoDB and route DynamoDB traffic through it.

Create three public subnets in the Neptune VPC with an internet gateway. Deploy the Lambda functions in these public subnets.

Create three private subnets in the Neptune VPC with a NAT gateway for internet access. Deploy the Lambda functions in these private subnets.

Develop an AWS Lambda function that triggers upon the creation of a new AWS account via Amazon EventBridge. The function will create a CloudTrail trail in the new account and configure logging to a central S3 bucket.

Create a single CloudTrail trail in the organization's management account configured to log events across all member accounts in the organization.

Use AWS Service Control Policies (SCPs) to enforce the creation of a CloudTrail trail in every account. Attach the SCP to the root organizational unit (OU) to ensure compliance.

Implement an AWS Step Functions workflow that periodically checks for new accounts and deploys CloudTrail trails using AWS CloudFormation StackSets.

Modify the existing Lambda function's code to send a custom Amazon CloudWatch metric indicating the number of transactions in each batch.

Create a new Lambda function subscribed to an Amazon Kinesis Data Stream that processes transaction counts and publishes to the SNS topic when the threshold is exceeded.

Configure an Amazon CloudWatch alarm to send a notification to the SNS topic when the custom metric exceeds 10,000.

Schedule an AWS Lambda function to analyze CloudWatch metrics every hour and publish to the SNS topic if any batch exceeds 10,000 transactions.

Update the existing Lambda function to write transaction counts to an Amazon DynamoDB table and use DynamoDB Streams to trigger a new Lambda function that publishes to the SNS topic.

Enable AWS X-Ray tracing for API Gateway and Lambda. Configure X-Ray to send traces to Amazon CloudWatch Logs. Use CloudWatch Logs Insights to query traces and identify latency issues.

Set up Route 53 latency-based routing policies. Enable AWS CloudTrail to log API activity for all services. Stream CloudTrail logs to an Amazon S3 bucket and analyze them using Amazon Athena.

Configure API Gateway and Lambda to stream logs to an Amazon Kinesis Data Firehose delivery stream. Use Kinesis Data Firehose to batch the logs into an Amazon S3 bucket. Analyze the logs using Amazon OpenSearch Service.

Enable Amazon CloudWatch Logs for API Gateway access logging and Lambda execution logs. Use CloudWatch Logs Insights to query and correlate logs across both services in real time.