Amazon Web Services DVA-C02 Dumps

Enable a Lambda authorizer for the Lambda function alias in API Gateway Republish PROD and create a new stage for DEV Create API Gateway stage variables for the PROD and DEV stages. Point each stage variable to the PROD Lambda authorizer to the DEV Lambda authorizer.

Set up a gateway response in API Gateway for the Lambda function alias. Republish PROD and create a new stage for DEV. Create gateway responses in API Gateway for PROD and DEV Lambda aliases

Use an environment variable for the Lambda function alias in API Gateway. Republish PROD and create a new stage for development. Create API gateway environment variables for PROD and DEV stages. Point each stage variable to the PROD Lambda function alias to the DEV Lambda function alias.

Use an API Gateway stage variable to configure the Lambda function alias Republish PROD and create a new stage for development Create API Gateway stage variables for PROD and DEV stages Point each stage variable to the PROD Lambda function alias and to the DEV Lambda function alias

Use Amazon Cognito user pools to manage user accounts. Create an Amazon Cognito user pool authorizer in API Gateway to control access to the API. Use the Lambda function to store the photos and details in the DynamoDB table. Retrieve previously uploaded photos directly from the DynamoDB table.

Use Amazon Cognito user pools to manage user accounts. Create an Amazon Cognito user pool authorizer in API Gateway to control access to the API. Use the Lambda function to store the photos in Amazon S3. Store the object's S3 key as part of the photo details in the DynamoDB table. Retrieve previously uploaded photos by querying DynamoDB for the S3 key.

Create an IAM user for each user of the application during the sign-up process. Use IAM authentication to access the API Gateway API. Use the Lambda function to store the photos in Amazon S3. Store the object's S3 key as part of the photo details in the DynamoDB table. Retrieve previously uploaded photos by querying DynamoDB for the S3 key.

Create a users table in DynamoDB. Use the table to manage user accounts. Create a Lambda authorizer that validates user credentials against the users table. Integrate the Lambda authorizer with API Gateway to control access to the API. Use the Lambda function to store the photos in Amazon S3. Store the object's S3 key as par of the photo details in the DynamoDB table. Retrieve previously uploaded photos by querying DynamoDB for the S3 key.<

{ if( $input.params(‘integration’) == "mock" ) "statusCode": 404 else "statusCode": 500 end }

{ if( $input.params('scope') == "internal" ) "statusCode": 200 else "statusCode": 500 end }

{ if( $input.path("integration") ) "statusCode": 200 else "statusCode":404 end }

{ if( $context.integration.status ) "statusCode": 200 else "statusCode": 500 end }

CloudFormation serverless intrinsic functions

AWS Elastic Beanstalk

AWS Serverless Application Model (AWS SAM)

AWS Cloud Development Kit (AWS CDK)

AWS CodeDeploy

AWS CodeArtifact

AWS CodeCommit

Amazon CodeGuru

BatchGetltem

Getltem

Scan

Query

Create four access points that allow access to the central S3 bucket. Assign an access point to each web application bucket.

Create a bucket policy that allows access to the central S3 bucket. Attach the bucket policy to the central S3 bucket.

Create a cross-origin resource sharing (CORS) configuration that allows access to the central S3 bucket. Add the CORS configuration to the central S3 bucket.

Create a Content-MD5 header that provides a message integrity check for the central S3 bucket. Insert the Content-MD5 header for each web application request.

Increase the number of shards of the Kinesis data stream.

Decrease the timeout of the Lambda function.

Increase the memory that is allocated to the Lambda function.

Decrease the number of shards of the Kinesis data stream.

Increase the timeout of the Lambda function.

Define a development stage on the API Gateway API. Instruct the other developers to point the endpoints to the development stage.

Define a new API Gateway API that points to the new API application code. Instruct the other developers to point the endpoints to the new API.

Implement a query parameter in the API application code that determines which code version to call.

Specify new API Gateway endpoints for the API endpoints that the developer wants to add.

The S3 event notification does not activate for files that are larger than 1.000 MB.

The resource-based policy for the Lambda function does not have the required permissions to be invoked by Amazon S3.

Lambda functions cannot be invoked directly from an S3 event.

The S3 bucket needs to be made public.

Use the Lambda function's ConcurrentExecutions metric in Amazon CloudWatch to measure the throughput.

Modify the application to log the calculated throughput to Amazon CloudWatch Logs. Use Amazon EventBridge to invoke a separate Lambda function to process the logs on a schedule.

Modify the application to publish custom Amazon CloudWatch metrics when the Lambda function receives and processes each message. Use the metrics to calculate the throughput.

Use the Lambda function's Invocations metric and Duration metric to calculate the throughput in Amazon CloudWatch.

Configure a TTL attribute for the leaderboard data

Use DynamoDB Streams to schedule and delete the leaderboard data

Use AWS Step Functions to schedule and delete the leaderboard data.

Set a higher write capacity when the scheduled delete job runs

Rewrite the application code to stream application logs to Amazon SNS Configure an SNS topic to send a notification when the number of errors exceeds the defined threshold within a 5-minute period

Configure a subscription filter on the CloudWatch Logs log group. Configure the filter to send an SNS notification when the number of errors exceeds the defined threshold within a 5-minute period.

Install and configure the Amazon Inspector agent on the EC2 instances to monitor for errors Configure Amazon Inspector to send an SNS notification when the number of errors exceeds the defined threshold within a 5-minute period

Create a CloudWatch metric filter to match the application error pattern in the log data. Set up a CloudWatch alarm based on the new custom metric. Configure the alarm to send an SNS notification when the number of errors exceeds the defined threshold within a 5-minute period.

Create an AWS Lambda function to filter events from CloudTrail if a role was created without CloudFormation Configure the Lambda function to publish to the SNS topic. Create an Amazon EventBridge schedule to invoke the Lambda function every 15 minutes

Create an AWS Fargate task in Amazon Elastic Container Service (Amazon ECS) to filter events from CloudTrail if a role was created without CloudFormation Configure the Fargate task to publish to the SNS topic Create an Amazon EventBridge schedule to run the Fargate task every 15 minutes

Launch an Amazon EC2 instance that includes a script to filter events from CloudTrail if a role was created without CloudFormation. Configure the script to publish to the SNS topic. Create a cron job to run the script on the EC2 instance every 15 minutes.

Create an Amazon EventBridge rule to filter events from CloudTrail if a role was created without CloudFormation Specify the SNS topic as the target of the EventBridge rule.

Create an event with Amazon EventBridge that will monitor the S3 bucket and then insert the records into DynamoDB.

Configure an S3 event to invoke an AWS Lambda function that inserts records into DynamoDB.

Create an AWS Lambda function that will poll the S3 bucket and then insert the records into DynamoDB.

Create a cron job that will run at a scheduled time and insert the records into DynamoDB.

Change the AWS CloudFormation templates for us-east-1 and us-west-1 to use an AWS AMI. Relaunch the stack for both Regions.

Copy the custom AMI from us-east-1 to us-west-1. Update the AWS CloudFormation template for us-west-1 to refer to AMI ID for the copied AMI Relaunch the stack

Build the custom AMI in us-west-1 Create a new AWS CloudFormation template to launch the stack in us-west-1 with the new AMI ID

Manually deploy the application outside AWS CloudFormation in us-west-1.

Host each website by using AWS Amplify with a serverless backend. Conned the repository branches that correspond to each of the desired environments. Start deployments by merging code changes to a desired branch.

Host each website in AWS Elastic Beanstalk with multiple environments. Use the EB CLI to link each repository branch. Integrate AWS CodePipeline to automate deployments from version control code merges.

Host each website in different Amazon S3 buckets for each environment. Configure AWS CodePipeline to pull source code from version control. Add an AWS CodeBuild stage to copy source code to Amazon S3.

Host each website on its own Amazon EC2 instance. Write a custom deployment script to bundle each website's static assets. Copy the assets to Amazon EC2. Set up a workflow to run the script when code is merged.

Create an Amazon Kinesis data stream, and attach it to the DynamoDB table. Create a trigger to connect the data stream to the Lambda function.

Create an Amazon EventBridge rule to invoke the Lambda function on a regular schedule. Conned to the DynamoDB table from the Lambda function to detect changes.

Enable DynamoDB Streams on the table. Create a trigger to connect the DynamoDB stream to the Lambda function.

Create an Amazon Kinesis Data Firehose delivery stream, and attach it to the DynamoDB table. Configure the delivery stream destination as the Lambda function.

Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool.

Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer in API Gateway.

Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token.

Create an 1AM user for each API user, attach an invoke permissions policy to the API. and use an I AM authorizer in API Gateway.

Add an AWS Secrets Manager GenerateSecretString resource to the CloudFormation template. Set the value to reference new credentials to the Cloudformation resource.

Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing, custom resource to store the credentials as a parameter. Set the parameter value to reference the new credentials. Set ma parameter type to SecureString.

Add an AWS Systems Manager Parameter Store resource to the CloudFormation template. Set the CloudFormation resource value to reference the new credentials Set the resource NoEcho attribute to true.

Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing custom resources to store the credentials as a parameter. Set the parameter value to reference the new credentials. Set the parameter NoEcho attribute to true.

Contact AWS Support to report an issue with the Auto Scaling Groups (ASG> service.

Add a DependsOn attribute to the ASGInstanceRole12345678 resource in the CloudFormation template. Then delete the stack.

Modify the CloudFormation template to retain the ASGInstanceRolet 2345678 resource. Then manually delete the resource after deployment.

Add a force parameter when calling CloudFormation with the role-am of ASGInstanceRole12345678.

Option A

Option B

Option C

Option D

Publish the data to Amazon Simple Queue Service (Amazon SQS).

Publish the data to Amazon Data Firehose.

Publish the data to Amazon EventBridge.

Publish the data to Amazon Kinesis Data Streams.

Check whether the policy that is assigned to the JAM role that is attached to the EC2 instances grants access to Amazon S3.

Check the S3 bucket policy to validate the access permissions for the S3 bucket.

Check whether the policy that is assigned to the 1AM user that is attached to the EC2 instances grants access to Amazon S3.

Check the S3 Lifecycle policy to validate the permissions that are assigned to the S3 bucket.

Check the security groups that are assigned to the EC2 instances. Make sure that a rule is not blocking the access to Amazon S3.

Create API Gateway resources and set the integration type value to MOCK Configure the method integration request and integration response to associate a response with an HTTP status code Create an API Gateway stage and deploy the API.

Create an AWS Lambda function that returns mocked responses and various HTTP status codes. Create API Gateway resources and set the integration type value to AWS_PROXY Deploy the API.

Create an EC2 application that returns mocked HTTP responses Create API Gateway resources and set the integration type value to AWS Create an API Gateway stage and deploy the API.

Create API Gateway resources and set the integration type value set to HTTP_PROXY. Add mapping templates and deploy the API. Create an AWS Lambda layer that returns various HTTP status codes Associate the Lambda layer with the API deployment

Use an EC2 instance to host the MySQL database. Store the session data and the application data in the MySQL database.

Use Amazon ElastiCache for Memcached to store and manage the session data. Use an Amazon RDS for MySQL DB instance to store the application data.

Use Amazon ElastiCache for Memcached to store and manage the session data and the application data.

Use the EC2 instance store to manage the session data. Use an Amazon RDS for MySQL DB instance to store the application data.

Increase the memory of the Lambda function to the maximum amount. Configure an Amazon EventBridge rule to schedule invocations of the Lambda function every minute to keep the execution environment active.

Optimize the static initialization code that runs when a new execution environment is prepared for the first time. Decrease and compress the size of the Lambda function package and the imported libraries and dependencies.

Increase the reserved concurrency of the Lambda function to the maximum value for unreserved account concurrency. Run any setup activities manually before the initial invocation of the Lambda function.

Publish a new version of the Lambda function. Configure provisioned concurrency for the Lambda function with the required minimum number of execution environments.

Amazon Cloudfront

Amazon ElastiCache to Memcached

Amazon ElastiCache for Redis in cluster mode

Amazon DynamoDB Accelerate (DAX)

CloudFront distributions can be created only in the us-east-1 Region.

Lambda@Edge functions can be created only in the us-east-1 Region.

A single AWS SAM template cannot contain multiple Lambda functions.

The CloudFront distribution and the S3 bucket cannot be created in the same Region.

Add a second cache behavior to the distribution with the same origin as the default cache behavior. Set the path pattern for the second cache behavior to the path of the login page, and make viewer access unrestricted. Keep the default cache behavior's settings unchanged.

Add a second cache behavior to the distribution with the same origin as the default cache behavior. Set the path pattern for the second cache behavior to *, and make viewer access restricted. Change the default cache behavior's path pattern to the path of the login page, and make viewer access unrestricted.

Add a second origin as a failover origin to the default cache behavior. Point the failover origin to the S3 bucket. Set the path pattern for the primary origin to *, and make viewer access restricted. Set the path pattern for the failover origin to the path of the login page, and make viewer access unrestricted.

Add a bucket policy to the S3 bucket to allow read access. Set the resource on the policy to the Amazon Resource Name (ARN) of the login page object in the S3 bucket. Add a CloudFront function to the default cache behavior to redirect unauthorized requests to the login page's S3 URL.

AWS X-Ray

Amazon CloudWatch

Amazon VPC flow logs

Amazon OpenSearch Service

Use the Scan API and a filter expression to match on the key.

Use the GetItem API with a request parameter for key that contains the partition key name and specific key value.

Use the ExecuteStatement API and a filter expression to match on the key.

Use the GetItem API and a PartiQL statement to match on the key.

Use the ExecuteStatement API and a PartiQL statement to match on the key.

AWS Batch

AWS Step Functions

AWS Glue

AWS Lambda

AWS Trusted Advisor

Amazon CloudWatch

AWS X-Ray

AWS CloudTrail

Change the application to use an alias that points to the current version. Deploy the new version of the code Update the alias to use the newly deployed version. If too many errors are encountered, point the alias back to the previous version.

Change the application to use an alias that points to the current version. Deploy the new version of the code. Update the alias to direct 10% of users to the newly deployed version. If too many errors are encountered, send 100% of traffic to the previous version

Do not make any changes to the application. Deploy the new version of the code. If too many errors are encountered, point the application back to the previous version using the version number in the Amazon Resource Name (ARN).

Create three aliases: new, existing, and router. Point the existing alias to the current version. Have the router alias direct 100% of users to the existing alias. Update the application to use the router alias. Deploy the new version of the code. Point the new alias to this version. Update the router alias to direct 10% of users to the new alias. If too many errors are encountered, send 100% of traffic to the existing alias.

The Lambda function's concurrency limit has been exceeded.

DynamoDB table requires a global secondary index (GSI) to support writes.

The Lambda function does not have IAM permissions to write to DynamoDB.

The DynamoDB table is not running in the same Availability Zone as the Lambda function.

Enable API caching in API Gateway.

Configure API Gateway to use an interface VPC endpoint.

Enable cross-origin resource sharing (CORS) for the APIs.

Configure usage plans and API keys in API Gateway.

Configure the SQS queue as a dead-letter queue for the Lambda function.

Create code that uses the AWS SDK to call the SQS SendMessage operation to add the invocation details to the SQS queue. Add the code to the end of the Lambda function.

Add two asynchronous invocation destinations to the Lambda function: one destination for successful invocations and one destination for failed invocations. Configure the SQS queue as the destination for each type. Create an Amazon CloudWatch alarm based on the DestinationDeliveryFailures metric to catch any message that cannot be delivered.

Add a single asynchronous invocation destination to the Lambda function to capture successful invocations. Configure the SQS queue as the destination. Create an Amazon CloudWatch alarm based on the DestinationDeliveryFailures metric to catch any message that cannot be delivered.

Configure the CloudFront cache Update the application to return cached content based upon the default request headers.

Override the cache method in me selected stage of API Gateway Select the POST method.

Save the latest request response in Lambda /tmp directory Update the Lambda function to check the /tmp directory

Save the latest request m AWS Systems Manager Parameter Store Modify the Lambda function to take the latest request response from Parameter Store

Define a maintenance window for the Lambda functions to ensure that the functions get updated copies of the dependencies.

Upgrade the Lambda functions to the most recent runtime version.

Define a Lambda layer that contains all of the shared dependencies.

Use an AWS CodeCommit repository to host the dependencies in a centralized location.

Create an AWS CodeCommt project. Add the repository package's build and test commands to the protects buildspec

Create an AWS CodeBuid project. Add the repository package's build and test commands to the projects buildspec

Create an AWS CodeDeploy protect. Add the repository package's build and test commands to the project's buildspec

Add an action to the source stage. Specify the newly created project as the action provider. Specify the build attract as the actions input artifact.

Add a new stage to the pipeline alter the source stage. Add an action to the new stage. Speedy the newly created protect as the action provider. Specify the source artifact as the action's input artifact.

Configure the fleet of EC2 instances to use encrypted EBS volumes to store data.

Configure the application to write all data to an encrypted Amazon S3 bucket.

Configure a custom encryption algorithm for the application that will encrypt and decrypt all data.

Configure an Amazon Machine Image (AMI) that has an encrypted root volume and store the data to ephemeral disks.

Grant the CloudFormation service role the S3 ListBucket and GetObject permissions. Add a bucket policy to Amazon S3 with the principal of "AWS" (account numbers)

Grant the CloudFormation service row the S3 GetObfect permission. Add a Bucket policy to Amazon S3 with the principal of "'"

Use a service-based link to grant the Lambda function the S3 ListBucket and GetObject permissions by explicitly adding the S3 bucket's account number in the resource.

Use a service-based link to grant the Lambda function the S3 GetObject permission Add a resource of "** to allow access to the S3 bucket.

BeforeInstall -> ApplicationStop -> ApplicationStart -> AfterInstall

ApplicationStop -> BeforeInstall -> AfterInstall -> ApplicationStart

BeforeInstall -> ApplicationStop -> ValidateService -> ApplicationStart

ApplicationStop -> BeforeInstall -> ValidateService -> ApplicationStart

Use the AWS:.Region pseudo parameter

Require the Region as a CloudFormation parameter

Find the Region from the AWS::Stackld pseudo parameter by using the Fn::Split intrinsic function

Dynamically import the Region by referencing the relevant parameter in AWS Systems Manager Parameter Store

Change the API Gateway route to add an X-Amz-Invocation-Type header win a sialic value of 'Event' in the integration request Deploy the API Gateway stage to apply the changes.

Change the configuration of the Lambda function that implements the request to process a file. Configure the maximum age of the event so that the Lambda function will ion asynchronously.

Change the API Gateway timeout value to match the Lambda function ominous value. Deploy the API Gateway stage to apply the changes.

Change the API Gateway route to add an X-Amz-Target header with a static value of 'A sync' in the integration request Deploy me API Gateway stage to apply the changes.

Generate the reports and then store the reports as Amazon DynamoDB items that have a specified TTL. Generate a URL that retrieves the reports from DynamoDB. Provide the URL to customers through the web application.

Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption. Attach the reports to an Amazon Simple Notification Service (Amazon SNS) message. Subscribe the customer to email notifications from Amazon SNS.

Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption. Generate a presigned URL that contains an expiration date Provide the URL to customers through the web application. Add S3 Lifecycle configuration rules to the S3 bucket to delete old reports.

Generate the reports and then store the reports in an Amazon RDS database with a date stamp. Generate an URL that retrieves the reports from the RDS database. Provide the URL to customers through the web application. Schedule an hourly AWS Lambda function to delete database records that have expired date stamps.

Create an Amazon Cognito user pool. Configure the user pool to allow unauthenticated users. Exchange user tokens for temporary credentials that allow authenticated users to assume a role.

Create an Amazon Cognito identity pool. Configure the identity pool to allow unauthenticated users. Exchange unique identity for temporary credentials that allow all users to assume a role.

Create an Amazon CloudFront distribution. Configure the distribution to allow unauthenticated users. Exchange user tokens for temporary credentials that allow all users to assume a role.

Create a role for authenticated users that allows access to all content. Create a role for unauthenticated users that allows access to only the sample content.

Allow all users to access the sample content by default. Create a role for authenticated users that allows access to the other content.

Amazon S3

AWS CloudTrail

Amazon CloudWatch

Amazon DynamoDB

Change the Lambda concurrency lo reserved concurrency.

Increase the timeout of the Lambda function.

Increase the memory allocation of the Lambda function.

Configure provisioned concurrency for the Lambda function.

Configure an AWS CloudTrail log file delivery to an Amazon S3 bucket. Create an Amazon CloudWatch alarm for the GetSecretValue. Secrets Manager API operation requests

Create a secrets manager-secret-unused AWS Config managed rule. Create an Amazon EventBridge rule to Initiate notification when the AWS Config managed rule is met.

Deactivate the applications secrets and monitor the applications error logs temporarily.

Configure AWS X-Ray for the applications. Create a sampling rule lo match the GetSecretValue Secrets Manager API operation requests.

Write the files to Amazon S3 Glacier Deep Archive. Add the S3 location of the files to the SQS queue.

Write the files to Amazon S3 Standard. Add the S3 location of the files to the SQS queue.

Write the files to an Amazon Elastic Block Store (Amazon EBS) General Purpose SSD volume. Add the EBS location of the files to the SQS queue.

Write messages that contain the contents of the uploaded files to the SQS queue.

All at once

Rolling with additional batch

Blue/green

Immutable

Create a schedule group in Amazon EventBridge Scheduler to invoke the Lambda function.

Configure provisioned concurrency for the Lambda function to have the necessary number of execution environments.

Use the SLATEST version of the Lambda function.

Configure reserved concurrency for the Lambda function to have the necessary number of execution environments.

Deploy changes, and publish a new version of the Lambda function.

Create an IAM user that has permissions to the S3 bucket. Add the user to an 1AM group

Create an IAM role that has permissions to the S3 bucket

Add the IAM role to an instance profile. Attach the instance profile to the EC2 instance.

Create an 1AM role that has permissions to the S3 bucket Assign the role to an 1AM group

Store the credentials of the IAM user in the environment variables on the EC2 instance

Mount an Amazon Elastic Block Store (Amazon EBS) volume onto one of the EC2 instances. Deploy a file system on the EBS volume. Use the host operating system to share a folder. Update the application code to read and write configuration files from the shared folder.

Deploy a micro EC2 instance with an instance store volume. Use the host operating system to share a folder. Update the application code to read and write configuration files from the shared folder.

Create an Amazon S3 bucket to host the repository. Migrate the existing .xml files to the S3 bucket. Update the application code to use the AWS SDK to read and write configuration files from Amazon S3.

Create an Amazon S3 bucket to host the repository. Migrate the existing .xml files to the S3 bucket. Mount the S3 bucket to the EC2 instances as a local volume. Update the application code to read and write configuration files from the disk.

Add an --enable-terminal ion-protection command line option to the create-stack command and the update-stack command.

Add a -disable-roll back command line option to the create-stack command and the update-stack command

Add a —parameters ParameterKey=P reserve Resources. ParameterVaIue=True command line option to the create-stack command and the update-stack command.

Add a -tags Key=PreserveResources.VaIue=True command line option to the create-stack command and the update-stack command.

Access on all buckets except the “DOC-EXAMPLE-BUCKET” bucket

Access on all buckets that start with “DOC-EXAMPLE-BUCKET” except the “DOC-EXAMPLE-BUCKET/secrets” bucket

Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket along with access to all S3 actions for objects in the “DOC-EXAMPLE-BUCKET” bucket that start with “secrets”

Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket except on objects that start with “secrets”

The developer must manually keep Hack of the data encryption keys used for each data object.

The SDK encrypts the data encryption key and stores it (encrypted) as part of the resumed ophertext.

The SDK stores the data encryption keys automaticity in Amazon S3.

The data encryption key is stored m the user data for the EC2 instance.

Remove the user credentials from the Lambda environment. Implement 1AM database authentication.

Move the user credentials from Lambda environment variables to AWS Systems Manager Parameter Store.

Move the user credentials from Lambda environment variables to AWS Key Management Service (AWS KMS).

Move the user credentials from the Lambda environment to an encrypted .txt file. Store the file in an S3 bucket.

Create a standard parameter in AWS Systems Manager Parameter Store Set Expiation and Expiration Notification policy types.

Create a standard parameter in AWS Systems Manager Parameter Store Create an AWS Lambda function to expire the configuration and to send Amazon Simple Notification Service (Amazon SNS) notifications.

Create an advanced parameter in AWS Systems Manager Parameter Store Set Expiration and Expiration Notification policy types.

Create an advanced parameter in AWS Systems Manager Parameter Store Create an Amazon EC2 instance with a corn job to expire the configuration and to send notifications.

Add logging statements to the Lambda functions. then use Amazon CloudWatch to view the logs.

Use AWS CloudTrail and then examine the logs.

Use AWS X-Ray. then examine the segments and errors.

Run Amazon inspector agents and then analyze performance.

Hardcode the credentials that are required to access the S3 objects in the application code. Use the credentials to access me required S3 objects.

Create a secret access key and access key ID with permission to access the S3 bucket. Store the key and key ID in AWS Secrets Manager. Configure the application to retrieve the Secrets Manager secret and use the credentials to access me S3 objects.

Create a Lambda function execution role Attach a policy to the rote that grants access to specific objects in the S3 bucket.

Create a secret access key and access key ID with permission to access the S3 bucket Store the key and key ID as environment variables m Lambda. Use the environment variables to access the required S3 objects.

Add a global secondary index (GSI) to the DynamoDB table with customer-type input, as the partition key and email_address as the sort key. Perform a query operation on the GSI by using the begins with key condition expression with the email_address property.

Add a global secondary index (GSI) to the DynamoDB table with email_address as the partition key and customer_type as the sort key. Perform a query operation on the GSI by using the begine_with key condition expresses with the email. Address property.

Add a local secondary index (LSI) to the DynemoOB table with customer_type as the partition Key and email_address as the sort Key. Perform a quick operation on the LSI by using the begine_with Key condition expression with the email-address property.

Add a local secondary index (LSI) to the DynamoDB table with job-title as the partition key and email_address as the sort key. Perform a query operation on the LSI by using the begins_with key condition expression with the email_address property.

Use an Application Load Balancer and the X-Forwarded-For headers.

Use a Network Load Balancer (NLB). Enable proxy protocol support on the NLB and the target application.

Use an Application Load Balancer. Register the targets by the instance ID.

Use a Network Load Balancer and the X-Forwarded-For headers.

Perform a BatchGetltem operation that returns items from the two tables. Use the list of songName artistName keys for the songs table and the list of artistName key for the artists table.

Create a local secondary index (LSI) on the songs table that uses artistName as the partition key Perform a query operation for each artistName on the songs table that filters by the list of songName Perform a query operation for each artistName on the artists table

Perform a BatchGetltem operation on the songs table that uses the songName/artistName keys. Perform a BatchGetltem operation on the artists table that uses artistName as the key.

Perform a Scan operation on each table that filters by the list of songName/artistName for the songs table and the list of artistName in the artists table.

Query

Scan

BatchGetltem

Getltem

Attach the existing 1AM policy to the Lambda function.

Create an 1AM role for the Lambda function Attach the existing 1AM policy to the role Attach the role to the Lambda function

Create an 1AM user with programmatic access Attach the existing 1AM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.

Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function

Refactor the Lambda function into two functions. Configure one function to transform the data and one function to load the data into the DynamoDB table. Create an Amazon Simple Queue Service (Amazon SQS) queue in between the functions to hold the items as messages and to invoke the second function.

Turn on auto scaling for the DynamoDB table. Use Amazon CloudWatch to monitor the table's read and write capacity metrics and to track consumed capacity.

Create an alias for the Lambda function. Configure provisioned concurrency for the application to use.

Refactor the Lambda function into two functions. Configure one function to store the data in the DynamoDB table. Configure the second function to process the data and update the items after the data is stored in DynamoDB. Create a DynamoDB stream to invoke the second function after the data is

stored.

Use AWS Amplify for automatic deployment templates. Use a traffic-splitting deployment to copy any deployments. Modify any resources created by Amplify, if necessary.

Use AWS CodeBuild for automatic deployment. Upload the required AppSpec file template. Save the appspec.yml file in the root directory folder of the revision. Specify the deployment group that includes the EC2 instances for the deployment.

Use AWS CloudFormation to create an infrastructure template in JSON format to deploy the EC2 instances. Use Cloud Formation helper scripts to install the necessary software and to start the application. Call the scripts directly from the template.

Use AWS AppSync to deploy the application. Upload the template as a GraphQL schema. Specify the EC2 instances for deployment of the application. Use resolvers as a version control mechanism and to make any updates to the deployments.

Create new AMIs, and specify encryption parameters. Copy the encrypted AMIs to the destination Region. Delete the unencrypted AMIs.

Use AWS Key Management Service (AWS KMS) to enable encryption on the unencrypted AMIs. Copy the encrypted AMIs to the destination Region.

Use AWS Certificate Manager (ACM) to enable encryption on the unencrypted AMIs. Copy the encrypted AMIs to the destination Region.

Copy the unencrypted AMIs to the destination Region. Enable encryption by default in the destination Region.

Export the existing API to an OpenAPI file. Create a new API. Import the OpenAPI file. Modify the new API to add request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.

Modify the existing API to add request validation. Deploy the updated API to a new API Gateway stage. Perform the tests. Deploy the updated API to the API Gateway production stage.

Create a new API. Add the necessary resources and methods, including new request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.

Clone the existing API. Modify the new API to add request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.

Change the Amazon SQS standard queue to an Amazon SQS FIFO queue by using the Amazon SQS message deduplication ID.

Set up a dead-letter queue.

Set the maximum concurrency limit of the AWS Lambda function to 1

Change the message processing to use Amazon Kinesis Data Streams instead of Amazon SQS.

Use an AWS Step Functions State machine to monitor API failures. Use the Wait state to delay calling the Lambda function.

Use an Amazon Simple Queue Service (Amazon SQS) queue to hold the API calls. Configure the Lambda function to poll the queue within the API threshold limits.

Use an Amazon CloudWatch Logs metric to count the number of API calls. Configure an Amazon CloudWatch alarm flat slops the currently running instance of the Lambda function when the metric exceeds the API threshold limits.

Use Amazon Kinesis Data Firehose to batch me API calls and deliver them to an Amazon S3 bucket win an event notification to invoke the Lambda function.

Migrate the secret credentials to Amazon RDS parameter groups. Encrypt the parameter by using an AWS Key Management Service (AWS KMS) key Turn on secret rotation. Use 1AM policies and roles to grant AWS KMS permissions to access Amazon RDS.

Migrate the credentials to AWS Systems Manager Parameter Store. Encrypt the parameter by using an AWS Key Management Service (AWS KMS) key. Turn on secret rotation. Use 1AM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager

Migrate the credentials to ECS Fargate environment variables. Encrypt the credentials by using an AWS Key Management Service (AWS KMS) key Turn on secret rotation. Use 1AM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager.

Migrate the credentials to AWS Secrets Manager. Encrypt the credentials by using an AWS Key Management Service (AWS KMS) key Turn on secret rotation Use 1AM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager by using keys.

Use Amazon ElastiCache for Memcached to offload read requests from the main database.

Replicate the data to Amazon DynamoDB. Set up a DynamoDB Accelerator (DAX) cluster.

Configure the Amazon RDS instances to use Multi-AZ deployment with one standby instance. Offload read requests from the main database to the standby instance.

Use Amazon ElastiCache for Redis to offload read requests from the main database.

Sam local invoke

Sam local generate-event

Sam local start-lambda

Sam local start-api

Add a CloudFormation Deletion Policy attribute with the Retain value to the database resource.

Update the CloudFormation stack policy to prevent updates to the database.

Modify the database to use a Multi-AZ deployment.

Create a CloudFormation stack set for the web application and database deployments.

Add a Cloud Formation DeletionPolicy attribute with the Retain value to the stack.

Create a Lambda environment variable to store the table name. Use the standard method for the programming language to retrieve the variable.

Store the table name in a file. Store the file in the /tmp folder. Use the SDK for the programming language to retrieve the table name.

Create a file to store the table name. Zip the file and upload the file to the Lambda layer. Use the SDK for the programming language to retrieve the table name.

Create a global variable that is outside the handler in the Lambda function to store the table name.

Obtain the request identifier from the AWS request ID field in the context object. Configure the application to write logs to standard output.

Obtain the request identifier from the AWS request ID field in the event object. Configure the application to write logs to a file.

Obtain the request identifier from the AWS request ID field in the event object. Configure the application to write logs to standard output.

Obtain the request identifier from the AWS request ID field in the context object. Configure the application to write logs to a file.

Query the instance metadata from http./M69.254.169.254. latestmeta-data/.

Query the instance user data from http '169 254.169 254. latest/user-data/

Query the Amazon Machine Image (AMI) information from http://169.254.169.254/latest/meta-data/ami/.

Check the hosts file of the operating system

Disable sampling for high-volume read-only requests. Sample at a lower rate for all requests that handle user interactions or transactions.

Disable sampling and trace all requests for requests that handle user interactions or transactions. Sample high-volume read-only requests at a higher rate.

Disable sampling and trace all requests for requests that handle user interactions or transactions. Sample high-volume read-only requests at a lower rate.

Disable sampling for high-volume read-only requests. Sample at a higher rate for all requests that handle user interactions or transactions.

Configure the integration request mapping template with Content-Type of text/html and statusCode of 200. Configure the integration response mapping template with Content-Type of application/json. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

Configure the Integration request mapping template with Content-Type of application/json. In the integration request mapping template, include the LandingPage HMTL code that references the APIs. Configure the integration response mapping template with Content-Type of text/html and statusCode of 200.

Configure the integration request mapping template with Content-Type of application/json and statusCode of 200. Configure the integration response mapping template with Content-Type of text/html. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

Configure the integration request mapping template with Content-Type of text/html. In the integration request mapping template, include the LandingPage HTML code that references the APIs. Configure the integration response mapping template with Content-Type of application/json and statusCode of 200.

Create and store the test events in Amazon S3 as JSON objects. Allow S3 bucket access to all 1AM users.

Create the test events. Configure the event sharing settings to make the test events shareable.

Create and store the test events in Amazon DynamoDB. Allow access to DynamoDB by using 1AM roles.

Create the test events. Configure the event sharing settings to make the test events private.

the /tmp directory

Amazon Elastic File System (Amazon EFS)

Amazon Elastic Block Store (Amazon EBS)

Amazon S3

AWS CloudTrail

AWS Trusted Advisor

Amazon VPC Flow Logs

Network access control lists

AWS Config rules

Compress the application to a zip file and upload it into AWS Lambda.

Test the new AWS Lambda function by first tracing it m AWS X-Ray.

Bundle the serverless application using a SAM package.

Create the application environment using the eb create my-env command.