CDA EXAM QUESTIONS WITH COMPLETE
SOLUTION
Amazon Cognito identity pools (federated identities)
enable you to create unique identities for your users and federate them with identity
providers. With an identity pool, you can obtain temporary, limited-privilege AWS
credentials to access other AWS services.
Amazon Cognito identity pools support the following identity providers:
• Public providers: Amazon, Facebook, Google, Apple
• Amazon Cognito user pools
• Open ID Connect providers (identity pools)
• SAML identity providers (identity pools)
• Developer authenticated identities (identity pools)
Identity pools are well suited to use cases where you need to authenticate users
through one of the above IdPs and then authorize access to AWS services such as
Amazon S3 and DynamoDB.
Synthesis
process of converting AWS CDK stacks to AWS CloudFormation templates and assets.
Changes should only be during the deployment phase and after AWS CloudFormation
template has been created. This will allow it to roll back the change if there are any
problems.
AWS VPC Flow Logs
provide the required visibility. These logs capture information about the IP traffic going
to and from network interfaces in the VPC.
AWS AppSync API Cache settings
provides three options: None, Full request caching, and Per-resolver caching.
Standard API Gateway
parameter and response code mapping templates allow you to map parameters one-to-
one and map a family of integration response status codes (matched by a regular
expression) to a single response status code.
Mapping Template
overrides provides you with the flexibility to perform many-to-one parameter mappings;
override parameters after standard API Gateway mappings have been applied;
conditionally map parameters based on body content or other parameter values;
programmatically create new parameters on the fly; and override status codes returned
by your integration endpoint.
Example uses for a mapping template override
To create a new header (or overwrite an existing header) as a concatenation of two
parameters
To override the response code to a success or failure code based on the contents of the
body
, To conditionally remap a parameter based on its contents or the contents of some other
parameter
To iterate over the contents of a json body and remap key value pairs to headers or
query strings
Therefore, the Developer can convert the query string parameters by creating a
mapping template.
Monitoring Amazon DynamoDB
CloudWatch, which collects and processes raw data from DynamoDB into readable,
near real-time metrics. These statistics are retained for a period of time, so that you can
access historical information for a better perspective on how your web application or
service is performing. By default, DynamoDB metric data is sent to CloudWatch
automatically
To determine how much of the provisioned capacity is being used you can monitor
ConsumedReadCapacityUnits or ConsumedWriteCapacityUnits over the specified time
period.
Requesting a strongly consistent read
DynamoDB returns a response with the most up-to-date data, reflecting the updates
from all prior write operations that were successful.
The GetItem operation
returns a set of attributes for the item with the given primary key. If there is no matching
item, GetItem does not return any data and there will be no Item element in the
response.
provides an eventually consistent read by default. If your application requires a strongly
consistent read, set ConsistentRead to true. Although a strongly consistent read might
take more time than an eventually consistent read, it always returns the last updated
value.
AWS Copilot
can run tasks and services on serverless infrastructures such as AWS Fargate. This
can provide the support of containers using ECS and serverless services like Fargate
does not require customers to manage.
Rotation
is the process of periodically updating a secret. When you rotate a secret, you update
the credentials in both the secret and the database or service. In Secrets Manager, you
can set up automatic rotation for your secrets.
Some services offer managed rotation, where the service configures and manages
rotation for you. With managed rotation, you don't use an AWS Lambda function to
update the secret and the credentials in the database. Amazon RDS can be used with
managed rotation
API Gateway REST API
SOLUTION
Amazon Cognito identity pools (federated identities)
enable you to create unique identities for your users and federate them with identity
providers. With an identity pool, you can obtain temporary, limited-privilege AWS
credentials to access other AWS services.
Amazon Cognito identity pools support the following identity providers:
• Public providers: Amazon, Facebook, Google, Apple
• Amazon Cognito user pools
• Open ID Connect providers (identity pools)
• SAML identity providers (identity pools)
• Developer authenticated identities (identity pools)
Identity pools are well suited to use cases where you need to authenticate users
through one of the above IdPs and then authorize access to AWS services such as
Amazon S3 and DynamoDB.
Synthesis
process of converting AWS CDK stacks to AWS CloudFormation templates and assets.
Changes should only be during the deployment phase and after AWS CloudFormation
template has been created. This will allow it to roll back the change if there are any
problems.
AWS VPC Flow Logs
provide the required visibility. These logs capture information about the IP traffic going
to and from network interfaces in the VPC.
AWS AppSync API Cache settings
provides three options: None, Full request caching, and Per-resolver caching.
Standard API Gateway
parameter and response code mapping templates allow you to map parameters one-to-
one and map a family of integration response status codes (matched by a regular
expression) to a single response status code.
Mapping Template
overrides provides you with the flexibility to perform many-to-one parameter mappings;
override parameters after standard API Gateway mappings have been applied;
conditionally map parameters based on body content or other parameter values;
programmatically create new parameters on the fly; and override status codes returned
by your integration endpoint.
Example uses for a mapping template override
To create a new header (or overwrite an existing header) as a concatenation of two
parameters
To override the response code to a success or failure code based on the contents of the
body
, To conditionally remap a parameter based on its contents or the contents of some other
parameter
To iterate over the contents of a json body and remap key value pairs to headers or
query strings
Therefore, the Developer can convert the query string parameters by creating a
mapping template.
Monitoring Amazon DynamoDB
CloudWatch, which collects and processes raw data from DynamoDB into readable,
near real-time metrics. These statistics are retained for a period of time, so that you can
access historical information for a better perspective on how your web application or
service is performing. By default, DynamoDB metric data is sent to CloudWatch
automatically
To determine how much of the provisioned capacity is being used you can monitor
ConsumedReadCapacityUnits or ConsumedWriteCapacityUnits over the specified time
period.
Requesting a strongly consistent read
DynamoDB returns a response with the most up-to-date data, reflecting the updates
from all prior write operations that were successful.
The GetItem operation
returns a set of attributes for the item with the given primary key. If there is no matching
item, GetItem does not return any data and there will be no Item element in the
response.
provides an eventually consistent read by default. If your application requires a strongly
consistent read, set ConsistentRead to true. Although a strongly consistent read might
take more time than an eventually consistent read, it always returns the last updated
value.
AWS Copilot
can run tasks and services on serverless infrastructures such as AWS Fargate. This
can provide the support of containers using ECS and serverless services like Fargate
does not require customers to manage.
Rotation
is the process of periodically updating a secret. When you rotate a secret, you update
the credentials in both the secret and the database or service. In Secrets Manager, you
can set up automatic rotation for your secrets.
Some services offer managed rotation, where the service configures and manages
rotation for you. With managed rotation, you don't use an AWS Lambda function to
update the secret and the credentials in the database. Amazon RDS can be used with
managed rotation
API Gateway REST API
