Master AWS Certifications with Confidence

AWS Identity and Access Management (IAM)

Amazon Cognito

AWS IAM Identity Center (AWS Single Sign-On)

AWS CLI

Customers can avoid all operational costs by using reserved instances.

AWS manages the installation and maintenance of customer applications.

Organizations can replace upfront capital expenses with variable costs.

Users can deploy applications globally within minutes.

Companies can transfer existing physical servers to AWS data centers.

Assign an IAM policy to the EC2 instances that mandates EBS encryption. Attach the policy to the instances' IAM role.

Provision the EBS volumes with encryption enabled during creation and attach them to the EC2 instances.

Configure an AWS KMS key policy to automatically encrypt all EBS volumes in the AWS account. Activate the policy for all EC2 instances.

Apply a resource tag with the key 'Encryption' and value 'Enabled' to all EC2 instances. Enable EBS encryption based on the tag.

Configure four AWS Site-to-Site VPN connections from the data center to AWS, establishing one VPN connection for each VPC.

Deploy a third-party virtual router appliance in each VPC and create IPsec VPN tunnels between the data center and each appliance.

Set up four AWS Direct Connect connections from the data center to a Direct Connect gateway in ap-southeast-1, configuring each VPC to use a dedicated connection.

Establish a single AWS Direct Connect connection from the data center to AWS. Create a transit gateway, attach all VPCs to it, and connect the Direct Connect connection to the transit gateway.

Activate the user-defined cost allocation tags for the application and team identifiers.

Activate the AWS-generated cost allocation tags for the application and team identifiers.

Define a cost category for each application in AWS Billing and Cost Management.

Enable IAM permissions for accessing Billing and Cost Management reports.

Configure a monthly cost budget.

Enable AWS Cost Explorer for historical and predictive cost analysis.

Configure an Amazon CloudWatch Logs metric filter to extract feature access events from the logs. Set the user ID and feature name as dimensions for the metric.

Modify the application logic to trigger an AWS SDK call for each feature access event. Use the SDK to increment a custom CloudWatch metric with user ID and feature name dimensions.

Update the CloudWatch agent configuration to parse feature access events from the logs. Configure the agent to publish these events as custom CloudWatch metrics with user ID and feature name dimensions.

Create an AWS Lambda function to process the Amazon CloudWatch Logs stream. Program the Lambda function to aggregate feature access events and update a custom CloudWatch metric with user ID and feature name dimensions.

Set the event source mapping batch size to 20 for the 'urgentqueue' and to 180 for the 'standardqueue'.

Set the delivery delay to 0 seconds for the 'urgentqueue' and to 20 seconds for the 'standardqueue'.

Set the event source mapping maximum concurrency to 20 for the 'urgentqueue' and to 180 for the 'standardqueue'.

Set the event source mapping batch window to 20 for the 'urgentqueue' and to 180 for the 'standardqueue'.

For each item, add a String attribute with the session creation timestamp. Create a script to scan the table for expired sessions and delete them using BatchWriteItem. Schedule the script hourly via a cron job on an Amazon EC2 instance.

For each item, add a String attribute with the session creation timestamp. Create a script to scan the table and delete expired sessions using BatchWriteItem. Deploy the script in a container and schedule it every 10 minutes using an Amazon ECS task on AWS Fargate.

For each item, add a Date attribute set to 24 hours after the session creation time. Create a GSI using this attribute as the sort key. Use a Lambda function referencing the GSI to delete expired sessions via BatchWriteItem. Trigger the function every minute with a CloudWatch event.

For each item, add a Number attribute set to 24 hours after the session creation time. Configure the DynamoDB table's TTL to reference this attribute.