AWS Solutions Architect/Developer Associate Certification Exam Questions and Answers

AWS Solutions Architect/Developer Associate Certification Exam Questions and Answers - ANSWER-- dynamodb:Attributes used for granting permissions that will limit access to specific attributes in the table. - dynamodb:ReturnValues used for getting the item attributes as they appear before or after they are updated.2 - dynamodb:Select condition key - mainly used for specifying attributes to be returned in the result of a Query or Scan request. - dynamodbLeadingKeys: used to restrict access to specific items in the table based on User Id which is the partition key. . - ANSWER-method request/ GET parameters - integration request (Lambda/source) - Lambda function - integration response- method response (status code) . - ANSWER-To perform a multipart upload with encryption using an AWS Key Management Service (AWS KMS) customer master key (CMK), the requester must have permission to the kms:Decrypt and kms:GenerateDataKey* actions on the key. These permissions are required because Amazon S3 must decrypt and read data from the encrypted file parts before it completes the multipart upload. .~ KINESIS - ANSWER- .~ LAMBDA - ANSWER- .~ X-RAY - ANSWER- .~API GATEWAY - ANSWER- .How doe the custom identity broker work? - ANSWER-Verify the user by your local identity system- call AWS STS(security token service) for the given tokens Assume Role/GedFedToken .How does ALB support multi-header values to the Lambda? - ANSWER-Enable the setting on the console - Lambda responds back an array query .How does Amazon X-ray work? - ANSWER- .How does Lambda Event Source Map with AWS SQS? - ANSWER-- Synchronous invocation -Lambda will long poll the queue - if messages not processed will set up DLQ .How does Lambda handle the streams -error handling? - ANSWER-- Restrict # of retires - Configure discarded events - Sent discard events to destination .How does Lambda process requests to the AlB? - ANSWER-ALB rules route HTTP requests to the lambda function - lambda processes requests and return JSON document -ALB takes the response as error or success .How does SSE-C work? - ANSWER- .How does the canary deployment work? Why is it valuable? - ANSWER-- You can choose the % of traffic the canary channel receives - Before rolling out features, you can put a small % of traffic to a lambda function to monitor the metrics and logs for testing .How should you improve your Scan Operation? - ANSWER-To make the most of your table’s provisioned throughput, you’ll want to use the Parallel Scan API operation so that your scan is distributed across your table’s partitions. But be careful that your scan doesn’t consume your table’s provisioned throughput and cause the critical parts of your application to be throttled. To avoid throttling, you need to rate-limit your client application. TERM ENGLISH IMAGE .Is there a cost for replicating read replicas cross-region? - ANSWER-Yes. The data transfer out of the region. .What are EC2 instance types? - ANSWER-General Purpose: For general workloads Compute Optimized: High performance Memory Optimized: term-2 Accelerated Computing: Storage Optimized: High read/write access to large data sets .What are RDS Read Replicas? - ANSWER--provides offload to queries - up to 5 Read Replicas .What are some considerations w/ running multiple containers - ANSWER-Before you can run Docker containers on Amazon ECS, you must create a task definition. You can define multiple containers and data volumes in a single task definition. .What are some examples of lambda -asynchronous invocations? - ANSWER-S3, SNS, CloudWatch EventBridge .What are some examples of ports of Security Groups? - ANSWER-80: HTTP 22: SSH - Secure File Transfer Protocol 443: HTTPS 3389: Remote Desktop - Windows 21: FTP - File Transfer Protocol .What are some examples to use stage variables? - ANSWER-- Lambda function ARN - HTTP endpoint - Mapping templates( passing the config parameters using lambda through a mapping template) .What are some issues running proxy server on CodeBuild? - ANSWER--ssl-bump is not configured properly. -Your organization’s security policy does not allow you to use ssl-bump. - Your file does not have proxy settings specified using a proxy element. .What are some reasons/use cases of modifying requests/responses w/ Lambda@Edge? - ANSWER--Website Security - User Authentication/Authorization - Dynamic Web Application .What are some use cases for RDS Multi- AZ? - ANSWER-- Disaster Recovery (High Availability) .What are some use cases using IAM Policy Stimulator? - ANSWER-- Test your service control policies in AWS Organizations - Test polices attached to the IAM users, groups + roles - Test polices attached to AWS resources ( S3, EC2, SQS/SNS) .What are Stage Variables? - ANSWER-- Environment variables for API Gateway, you can use them to change the configuration values - Passed to the “context” object in lambda .What are the 2 types of Lambda Authorization available for Lambda URLs? - ANSWER-- AWS_IAM - the function URL can only be invoked by an IAM user or role with the necessary permissions To restrict access to the Lambda function to a specific set of users or roles within your organization. -NONE - anyone can invoke the Lambda function using the URL. Make the Lambda function publicly accessible and do not require any additional authentication or authorization beyond the URL. However, you may still need to validate the incoming requests in the Lambda function to ensure that the request comes from a trusted source. .What are the 2 types of Lambda Authorizer? - ANSWER-- A token-based Lambda authorizer (also called a TOKEN authorizer) receives the caller’s identity in a bearer token, such as a JSON Web Token (JWT) or an OAuth token. - A request parameter-based Lambda authorizer (also called a REQUEST authorizer) receives the caller’s identity in a combination of headers, query string parameters, stageVariables, and $context variables. .What are the 3 Lambda Invocation Types? - ANSWER-RequestResponse (default) - Invoke the function synchronously. Keep the connection open until the function returns a response or times out. Event - Invoke the function asynchronously. Send events that fail multiple times to the function’s dead-letter queue (if it’s configured). The API response only includes a status code. DryRun - Validate parameter values and verify that the user or role has permission to invoke the function. .What are the 4 CRUD operations? - ANSWER-PutItem - create an item. GetItem - read an item. UpdateItem - update an item.