Desarrollo en AWS

A business operates Amazon EC2 instances across several AWS accounts. A developer is tasked with creating an application that aggregates lifecycle events from these instances. These events must be consolidated into a single Amazon SQS queue in the primary AWS account for further processing.

• Set up Amazon EC2 to forward lifecycle events from every account to the primary account’s EventBridge event bus. Then, create an EventBridge rule in that bus to capture all lifecycle events, using the SQS queue as the designated target.
• Apply resource policies on the main account’s SQS queue to grant write permissions to each account. In each account’s EventBridge event bus, set up a rule that filters for EC2 lifecycle events and directs them to the SQS queue in the primary account.
• Develop an AWS Lambda function that periodically reviews all EC2 instances across accounts to detect lifecycle changes, sending a notification to the SQS queue in the main account whenever a change is found. A scheduled EventBridge rule triggers this function every minute.
• Adjust the primary account’s event bus permissions to accept events from other accounts. In every account, establish an EventBridge rule to forward all EC2 lifecycle events to the main account’s event bus. Finally, in the main account, create an EventBridge rule that filters these events and designates the SQS queue as its target.

An application employs Amazon Cognito user pools and identity pools to manage secure access. A developer needs to integrate user-specific file upload and download functionality with Amazon S3. The solution must ensure that files (ranging from 3 KB to 300 MB) are stored and retrieved securely, and that users can access only their own files.

• Utilize S3 Event Notifications to monitor and validate file upload and download actions, then update the user interface accordingly.
• Record metadata of the uploaded files in a separate Amazon DynamoDB table and filter the UI’s file list by matching the current user’s ID with the stored user ID.
• Deploy Amazon API Gateway along with an AWS Lambda function to handle file transfers, validating every request within the Lambda before proceeding.
• Implement an IAM policy scoped to the Amazon Cognito identity pool that limits each user to accessing only their designated folder in Amazon S3.

A company is developing a scalable data management system using AWS services to accelerate development and increase agility. The system must ingest large volumes of data from diverse sources and process it through sequential business rules and transformations, with the ability to reprocess data if errors occur. The goal is to achieve scalability with minimal maintenance overhead.

• Utilize AWS Batch to process tasks in batches.
• Employ AWS Step Functions to orchestrate and sequence business rules and transformations, with built-in error handling and retry capabilities.
• Leverage AWS Glue for data ingestion and transformation tasks.
• Rely on AWS Lambda functions triggered by events to execute processing tasks.

A developer has implemented a Python AWS Lambda function that retrieves data from Amazon S3 objects and writes it to a DynamoDB table. Although the function is triggered successfully by an S3 event when an object is created, it fails during the write operation to DynamoDB. What is the most probable cause of this failure?

• The Lambda function might have exceeded its concurrency limit.
• The DynamoDB table may require a global secondary index (GSI) to support write operations.
• The Lambda function likely lacks the necessary IAM permissions to write to DynamoDB.
• The DynamoDB table might not be in the same Availability Zone as the Lambda function.

A developer is designing an AWS CloudFormation template to launch EC2 instances across multiple AWS accounts. The instances must be selected from a predefined list of approved instance types. How can the developer incorporate this list into the CloudFormation template?

• Develop individual CloudFormation templates for each approved EC2 instance type.
• Define separate resources in the template’s Resources section for each EC2 instance type.
• Set up a distinct parameter for every approved EC2 instance type within the template.
• Define a single parameter in the template with the approved instance types listed as AllowedValues.

A company operates a custom application on on-premises Linux servers accessed via Amazon API Gateway, with AWS X-Ray tracing enabled on the API test stage. What is the simplest method to enable X-Ray tracing on these on-premises servers?

• Install and run the X-Ray SDK on the servers to capture and send trace data to X-Ray.
• Deploy and run the X-Ray daemon on the servers to collect and forward trace data to the X-Ray service.
• Intercept incoming requests on-premises and set up an AWS Lambda function to extract, process, and forward trace segments using the PutTraceSegments API.
• Intercept incoming requests on-premises and configure an AWS Lambda function to extract, process, and forward telemetry records using the PutTelemetryRecords API.

A company intends to share data with a third party that provides an HTTP API endpoint, and it possesses the necessary API key. The company needs to manage this API key via code without affecting application performance. Which solution is the most secure?

• Store the API credentials in AWS Secrets Manager and retrieve them at runtime using the AWS SDK to make the API call.
• Embed the API credentials directly in a local code variable, commit the code to a secure Git repository, and use the variable at runtime.
• Save the API credentials as an object in a private Amazon S3 bucket secured by IAM policies, retrieving them at runtime via the AWS SDK.
• Store the API credentials in an Amazon DynamoDB table with resource-based policies, and retrieve them at runtime using the AWS SDK.

A developer is launching a new application on Amazon ECS and must manage various configuration variables, including remote API authentication details, the API URL, and credentials. The authentication details and API URL should be available across all current and future deployments in development, testing, and production. Which method allows the developer to retrieve these variables with minimal application changes?

• Modify the application to fetch variables from AWS Systems Manager Parameter Store using unique paths for each variable per environment, while storing credentials in AWS Secrets Manager for each environment.
• Adjust the application to obtain variables from AWS KMS by storing the API URL and credentials as distinct keys for each environment.
• Change the application to load variables from an encrypted file packaged with the application, with separate files for each environment.
• Configure the application to pull variables from the deployment environment, defining the authentication details and API URL as unique identifiers in the ECS task definition during deployment.

A company is modernizing its legacy internal applications on AWS, and leadership has decided to reimplement the employee directory using native AWS services. A developer must design a solution to store employee contact details along with high-resolution photos. Which solution best supports searching and retrieving each employee’s details and photos via AWS APIs?

• Encode each employee’s contact information and photos using Base64, then store the data in an Amazon DynamoDB table using a sort key.
• Maintain employee contact information in a DynamoDB table alongside S3 object keys that reference the high-resolution photos stored in Amazon S3.
• Utilize Amazon Cognito user pools to implement a fully managed SaaS-based employee directory.
• Store employee contact details in an Amazon RDS database with the corresponding photos kept in Amazon EFS.