Master AWS Certifications with Confidence

Amazon GuardDuty

Amazon Inspector

Amazon Macie

AWS Security Hub

AWS PrivateLink

Security group

Network access control list (ACL)

AWS WAF

Deploy a PostgreSQL cluster on Amazon EC2 instances across multiple Regions using a custom replication setup.

Use Amazon RDS for PostgreSQL with Multi-AZ deployment enabled in a single Region.

Configure an Amazon RDS for PostgreSQL primary instance and create a cross-Region read replica in another AWS Region.

Implement automated backups of an Amazon RDS for PostgreSQL instance and copy backups to a secondary Region.

Replace the ALB with a Network Load Balancer. Create a NAT gateway in a public subnet to allow internet traffic to the EC2 instances.

Move the EC2 instances to public subnets. Update the ALB's security group to allow inbound traffic from the internet.

Update the route tables for the private subnets to include a route to an internet gateway. Modify the EC2 instances' security groups to allow inbound HTTP traffic.

Create public subnets in each Availability Zone. Associate the ALB with the public subnets. Ensure the public subnets' route tables direct internet traffic through an internet gateway.

Create an SCP to allow the marketing team's AWS account access to the specified S3 prefixes. Attach the SCP to the OU containing the finance team's account.

Create an IAM role in the finance team's account with an IAM policy restricting access to the specific S3 prefixes. Establish a trust relationship with the marketing team's account. In the marketing team's account, create an IAM role permitting assumption of the finance team's IAM role.

Apply a bucket policy on the S3 bucket with conditions limiting access to the specific prefixes. In the marketing team's account, create an IAM role with permissions to access the S3 bucket in the finance team's account.

Create an IAM role in the finance team's account with full S3 access. Use a permissions boundary to restrict access to the required prefixes. In the marketing team's account, create an IAM role allowing assumption of the finance team's role.

Create a second ALB and deploy the new version to EC2 instances in a new Auto Scaling group. Update the Route 53 record to use weighted routing with 15% traffic directed to the new ALB. Configure session stickiness on both ALBs.

Create a new target group for the ALB and deploy the updated version to EC2 instances in this target group. Configure the ALB listener rule to route 15% of traffic to the new target group. Enable target group stickiness on the ALB.

Modify the existing Auto Scaling group's launch template to include the new version. Use an instance refresh with a 15% minimum healthy percentage to gradually replace instances. Enable ALB connection draining.

Deploy the new version to a separate Auto Scaling group and register it with the ALB. Adjust the ALB's routing algorithm to weighted least connections with 15% weight assigned to the new group. Enable session stickiness on the ALB.

Modify the application code to include a daily scan of the S3 bucket and delete logs older than 180 days.

Develop an AWS Lambda function to periodically scan the S3 bucket and remove logs older than 180 days.

Configure an S3 Lifecycle rule for the bucket to expire objects 180 days after creation.

Organize logs using a date-based key prefix. Schedule an AWS Lambda function to delete objects with prefixes older than 180 days.

Update the application to fetch parameters from AWS Systems Manager Parameter Store for the API URL and feature toggles. Store the database connection string in AWS Secrets Manager, using environment-specific paths for each parameter.

Update the application to retrieve all parameters using AWS Key Management Service (AWS KMS). Encrypt the API URL, feature toggles, and database connection string as separate keys per environment.

Store all parameters in an encrypted configuration file bundled with the application. Use environment-specific files for each deployment and decrypt them at runtime.

Define all parameters directly in the ECS task definition as environment variables. Encrypt sensitive values using AWS KMS and reference them dynamically during deployment.