A. Create a new DynamoDB table in the new Region with cross-Region replication enabled

B. Create new ALB and Auto Scaling group global resources and configure the new ALB to direct traffic to the new Auto Scaling group

C. Create new ALB and Auto Scaling group resources in the new Region and configure the new ALB to direct traffic to the new Auto Scaling group

D. Create Amazon Route 53 records, health checks, and latency-based routing policies to route to the ALB

E. Create Amazon Route 53 aliases, health checks, and failover routing policies to route to the ALB

F. Convert the DynamoDB table to a global table

A. Use AWS CDK to deploy API Gateway and Lambda function

B. When code needs to be changed, update the AWS CloudFormation stack and deploy the new version of the APIs and Lambda function

C. Use a Route 53 failover routing policy for the canary release strategy

D. Use AWS CloudFormation to deploy API Gateway and Lambda functions using Lambda function version

E. When code needs to be changed, update the CloudFormation stack with the new Lambda code and update the API versions using a canary release strateg

F. Promote the new version when testing is complete

A. In the logging account create a CloudWatch Logs destination with a destination polic

B. For each new account subscribe the CloudWatch Logs log groups to th

C. Destination Configure a single Amazon Kinesis data stream and a single Amazon Kinesis Data Firehose delivery stream to deliver the logs from the CloudWatch Logs destination to the S3 bucket

D. In the logging account create a CloudWatch Logs destination with a destination policy for each Region

E. Configure a single Amazon Kinesis data stream and a single Amazon Kinesis Data Firehose delivery stream to deliver the logs from all the CloudWatch Logs destinations to the S3 bucket

F. In the logging account create a CloudWatch Logs destination with a destination policy for each Region

A. In the organization's management account configure an AWS account as the Amazon GuardDuty administrator accoun

B. In the GuardDuty administrator account add the company's existing AWS accounts to GuardDuty as members In the GuardDuty administrator account create an Amazon EventBridge rule with an event pattern to match GuardDuty events and to forward matching events to the SNS topic

C. In the organization's management account configure Amazon GuardDuty to add newly created AWS accounts by invitation and to send invitations to the existing AWS accounts Create an AWS Cloud Formation stack set that accepts the GuardDuty invitation and creates an Amazon EventBridge rule Configure the rule with an event pattern to matc

D. GuardDuty events and to forward matching events to the SNS topi

E. Configure the Cloud Formation stack set to deploy into all AWS accounts in the organization

F. In the organization's management accoun G

A. Add a DelelionPolicy attribute to the S3 bucket resource, with the value Delete forcing the bucket to be removed when the stack is deleted

B. Add a custom resource with an AWS Lambda function with the DependsOn attribute specifying the S3bucket, and an IAM rol

C. Write the Lambda function to delete all objects from the bucket when RequestType is Delete

D. Identify the resource that was not delete

E. Manually empty the S3 bucket and then delete it

F. Replace the EC2 and S3 bucket resources with a single AWS OpsWorks Stacks resourc G

A. Configure an Amazon EventBridge rule that reacts to EC2 RunInstances API call

B. Configure the rule to invoke an AWS Lambda function to attach the default instance profile to the EC2 instances

C. Configure the ec2-instance-profile-attached AWS Config managed rule with a trigger type of configuration change

D. Configure an automatic remediation action that invokes an AWS Systems Manager Automation runbook to attach the default instance profile to the EC2 instances

E. Configure an Amazon EventBridge rule that reacts to EC2 StartInstances API call

F. Configure the rule to invoke an AWS Systems Manager Automation runbook to attach the default instance profile to the EC2 instances

A. Create an Amazon EventBridge rule for the CloudTrail StopLogging even

B. Create an AWS Lambda (unction that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLogging was calle

C. Add the Lambda function ARN as a target to the EventBridge rule

D. Deploy the AWS-managed CloudTrail-enabled AWS Config rule set with a periodic interval to 1 hour

E. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLoggmg was calle

F. Add the Lambda function ARN as a target to the EventBridge rule

A. Attach the AWSC loud Formation FullAccess IAM policy to the AWS CtoudFormation role

B. Automatically recover the stack resources by using AWS CloudFormation drift detection

C. Issue a ContinueUpdateRollback command from the AWS CloudFormation console or the AWS CLI

D. Manually adjust the resources to match the expectations of the stack

E. Update the existing AWS CloudFormation stack by using the original template

A. Create an additional policy to include a Deny rule for the GitPush and PutFile action

B. Include a restriction for the specific restriction for the specific repositories in the policy repositories in the policy statement with a condition that references the main branch

C. Remove the IAM policy, and add an AWSCodeCommitReadOnly managed polic

D. Add an Allow rule for the GitPush and PutFile actions for the specific repositories in the policy statement with a condition that references the mam branch

E. Modify the IAM policy Include a Deny rule for the GitPush and PutFile actions for the specific repositories in the policy statement with a condition that references the main branch

F. Create an additional policy to include an Allow rule for the GitPush and PutFile action G

A. Configure a delegated administrator account for AWS Confi

B. Enable trusted access for AWS Config in the organization

C. Configure a delegated administrator account for AWS Confi

D. Create a service-linked role for AWS Config in the organization’s management account

E. Create an AWS CloudFormation template to create an AWS Config aggregato

F. Configure a CloudFormation stack set to deploy the template to all accounts in the organization

A. Configure a CloudWatch Logs subscription filter to use AWS Glue to transfer all logs to an S3 bucket

B. Configure a CloudWatch Logs subscription filter to use Amazon Kinesis Data Firehose to stream all logs to an S3 bucket

C. Configure a CloudWatch Logs subscription fitter to stream all logs to an S3 bucket

D. Configure the S3 bucket lifecycle policy to transition logs to S3 Glacier after 90 days and to expire logs after 3

E. Configure the S3 bucket lifecycle policy to transition logs to Reduced Redundancy after 90 days and to expire logs after 3

A. Create an Amazon EventBridge rule to send notifications to the security team whenever a user logs in to an EC2 instance Use EC2 Instance Connect to log in to the instance

B. Deploy Auto Scaling groups byusing AWS Cloud Formation Use the cfn-init helper script to deploy appropriate VPC routes for external access Rebuild the custom AMI so that the custom AMI includes AWS Systems Manager Agent

C. Deploy a NAT gateway and a bastion host that has internet access Create a security group that allows incoming traffic on all the EC2 instances from the bastion host Install AWS Systems Manager Agent on all the EC2 instances Use Auto Scaling group lifecycle hooks for monitoring and auditing access Use Systems Manager Session Manager to log in to the instances Send logs to a log group m Amazon CloudWatch Log

D. Export data to Amazon S3 for auditing Send notifications to the security team by using S3 event notifications

E. Use EC2 Image Builder to rebuild the custom AMI Include the most recent version of AWS Systems Manager Agent in the Image Configure the Auto Scaling group to attach the AmazonSSMManagedinstanceCore role to all the EC2 instances Use Systems Manager Session Manager to log in to the instances Enable logging of session details to Amazon S3 Create an S3 event notification for new file uploads to send a message to the security team through an Amazon Simple Notification Service (Amazon SNS) topic

F. Use AWS Systems Manager Automation to build Systems Manager Agent into the custom AMI Configure AWS Configure to attach an SCP to the root organization account to allow the EC2 instances to connect to Systems Manager Use Systems Manager Session Manager to log in to the instances Enable logging of session details to Amazon S3 Create an S3 event notification for new file uploads to send a message to the security team through an Amazon Simple Notification Service (Amazon SNS) topic

A. Add a reader instance to the Aurora cluste

B. Update the application to use the Aurora cluster endpoint for write operation

C. Update the Aurora cluster's reader endpoint for reads

D. Add a reader instance to the Aurora cluste

E. Create a custom ANY endpoint for the cluste

F. Update the application to use the Aurora cluster's custom ANY endpoint for read and write operations

A. In the CloudFormaiion template add an AWS Config rul

B. Place the configuration file content in the rule's InputParameters property and set the Scope property to the EC2 Auto Scaling grou

C. Add an AWS Systems Manager Resource Data Sync resource to the template to poll for updates to the configuration

D. In the CloudFormation template add an EC2 launch template resourc

E. Place the configuration file content in the launch templat

F. Configure the cfn-mit script to run when the instance is launched and configure the cfn-hup script to poll for updates to the configuration

A. The 53 bucket default encryption is enabled

B. There is an error in the S3 bucket policy

C. The object has been moved to S3 Glacier

D. There is an error in the IAM role configuration

E. S3 Versioning is enabled

A. Create a replication IAM role in the source account

B. Create a replication I AM role in the target account

C. Add statements to the source bucket policy allowing the replication IAM role to replicate objects

D. Add statements to the target bucket policy allowing the replication IAM role to replicate objects

E. Create a replication rule in the source bucket to enable the replication

F. Create a replication rule in the target bucket to enable the replication

A. Add a stage to the CodePipeline pipeline between the source and deploy stage

B. Use AWS CodeBuild to create a runtime environment and build commands in the buildspec file to invoke test script

C. If errors are found, use the aws deploy stop-deployment command to stop the deployment

D. Add a stage to the CodePipeline pipeline between the source and deploy stage

E. Use this stage to invoke an AWS Lambda function that will run the test script

F. If errors are found, use the aws deploystop-deployment command to stop the deployment