- (Exam Topic 2)
A company runs an application using Amazon ECS. The application creates esi/ed versions of an original image and then makes Amazon S3 API calls to store the resized images in Amazon S3.
How can a solutions architect ensure that the application has permission to access Amazon S3?

1. A. Update the S3 role in AWS IAM to allow read/write access from Amazon ECS, and then relaunch the container.
2. B. Create an IAM role with S3 permissions, and then specify that role as the taskRoleAm in the task definition.
3. C. Create a security group that allows access from Amazon ECS to Amazon S3, and update the launch configuration used by the ECS cluster.
4. D. Create an IAM user with S3 permissions, and then relaunch the Amazon EC2 instances for the ECS cluster while logged in as this account.

Correct Answer: B

- (Exam Topic 2)
A company has a mulli-tier application that runs six front-end web servers in an Amazon EC2 Auto Scaling group in a single Availability Zone behind an Application Load Balancer (ALB). A solutions architect needs lo modify the infrastructure to be highly available without modifying the application.
Which architecture should the solutions architect choose that provides high availability?

1. A. Create an Auto Scaling group that uses three Instances across each of tv/o Regions.
2. B. Modify the Auto Scaling group to use three instances across each of two Availability Zones.
3. C. Create an Auto Scaling template that can be used to quickly create more instances in another Region.
4. D. Change the ALB in front of the Amazon EC2 instances in a round-robin configuration to balance traffic to the web tier.

Correct Answer: B
High availability can be enabled for this architecture quite simply by modifying the existing Auto Scaling group to use multiple availability zones. The ASG will automatically balance the load so you don't actually need to specify the instances per AZ.

- (Exam Topic 3)
A company wants to restrict access to the content of one of its man web applications and to protect the content by using authorization techniques available on AWS. The company wants to implement a serverless architecture end an authentication solution for fewer tian 100 users. The solution needs to integrate with the main web application and serve web content globally. The solution must also scale as to company's user base grows while providing lowest login latency possible.

1. A. Use Amazon Cognito tor authenticatio
2. B. Use Lambda#Edge tor authorization Use Amazon CloudFront 10 serve the web application globally
3. C. Use AWS Directory Service for Microsoft Active Directory tor authentication Use AWS Lambda for authorization Use an Application Load Balancer to serve the web application globally
4. D. Usa Amazon Cognito for authentication Use AWS Lambda tor authorization Use Amazon S3 Transfer Acceleration 10 serve the web application globally.
5. E. Use AWS Directory Service for Microsoft Active Directory for authentication Use Lambda@Edge for authorization Use AWS Elastic Beanstalk to serve the web application.

Correct Answer: A

- (Exam Topic 3)
A company has an application that places hundreds of .csv files into an Amazon S3 bucket every hour. The files are 1 GB in size. Each time a file is uploaded, the company needs to convert the file to Apache Parquet format and place the output file into an S3 bucket.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Create an AWS Lambda function to download the .csv files, convert the files to Parquet format, and place the output files in an S3 bucke
2. B. Invoke the Lambda function for each S3 PUT event.
3. C. Create an Apache Spark job to read the .csv files, convert the files to Parquet format, and place the output files in an S3 bucke
4. D. Create an AWS Lambda function for each S3 PUT event to invoke the Spark job.
5. E. Create an AWS Glue table and an AWS Glue crawler for the S3 bucket where the application places the.csv file
6. F. Schedule an AWS Lambda function to periodically use Amazon Athena to query the AWS Glue table, convert the query results into Parquet format, and place the output files into an S3 bucket.
7. G. Create an AWS Glue extract, transform, and load (ETL) job to convert the .csv files to Parquet format and place the output files into an S3 bucke
8. H. Create an AWS Lambda function for each S3 PUT event to invoke the ETL job.

Correct Answer: D
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/three-aws-glue-etl-job-types-for-converting-d

- (Exam Topic 3)
A company wants to experiment with individual AWS accounts for its engineer team. The company wants to be notified as soon as the Amazon EC2 instance usage for a given month exceeds a specific threshold for each account.
What should a solutions architect do to meet this requirement MOST cost-effectively?

1. A. Use Cost Explorer to create a daily report of costs by servic
2. B. Filter the report by EC2 instances.Configure Cost Explorer to send an Amazon Simple Email Service (Amazon SES) notification when a threshold is exceeded.
3. C. Use Cost Explorer to create a monthly report of costs by servic
4. D. Filter the report by EC2 instances.Configure Cost Explorer to send an Amazon Simple Email Service (Amazon SES) notification when a threshold is exceeded.
5. E. Use AWS Budgets to create a cost budget for each accoun
6. F. Set the period to monthl
7. G. Set the scope to EC2 instance
8. H. Set an alert threshold for the budge
9. I. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive a notification when a threshold is exceeded.
10. J. Use AWS Cost and Usage Reports to create a report with hourly granularit
11. K. Integrate the report data with Amazon Athen
12. L. Use Amazon EventBridge to schedule an Athena quer
13. M. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive a notification when a threshold is exceeded.

Correct Answer: C
AWS Budgets allows you to create budgets for your AWS accounts and set alerts when usage exceeds a certain threshold. By creating a budget for each account, specifying the period as monthly and the scope as EC2 instances, you can effectively track the EC2 usage for each account and be notified when a threshold is exceeded. This solution is the most cost-effective option as it does not require additional resources such as Amazon Athena or Amazon EventBridge.