A. Edit the backup vault access policy in the new account to allow access to the primary account

B. Edit the backup vault access policy in the primary account to allow access to the new account

C. Edit the backup vault access policy in the primary account to allow access to the KMS key in the new account

D. Edit the key policy of the KMS key in the primary account to share the key with the new account

E. Edit the key policy of the KMS key in the new account to share the key with the primary account

A. Create an Amazon CloudWatch Event rule that runs periodically and targets an AWS Lambda functio

B. Within the Lambda function, evaluate the current state of the AWS environment and compare deployed resource values to resource limits on the accoun

C. Notify the Senior Manager if the account is approaching a service limit

D. Deploy an AWS Lambda function that refreshes AWS Trusted Advisor checks, and configure an Amazon CloudWatch Events rule to run the Lambda function periodicall

E. Create another CloudWatch Events rule with an event pattern matching Trusted Advisor events and a target Lambda functio

F. In the target Lambda function, notify the Senior Manager

A. Create a data stream consumer with enhanced fan-ou

B. Set the Lambda function that processes the logs as the consumer

C. Increase the ParallelizationFactor setting in the Lambda event source mapping

D. Configure reserved concurrency for the Lambda function that processes the logs

E. Increase the batch size in the Kinesis data stream

F. Turn off the ReportBatchltemFailures setting in the Lambda event source mapping

A. Allow users to deploy CloudFormation stacks using a CloudFormation service role onl

B. Use CloudFormation drift detection to detect when resources have drifted from their expected state

C. Allow users to deploy CloudFormation stacks using a CloudFormation service role onl

D. Use AWS Config rules to detect when resources have drifted from their expected state

E. Allow users to deploy CloudFormation stacks using AWS Service Catalog onl

F. Enforce the use of a launch constrain G

A. Create an Amazon EventBridge rule to send notifications to the security team whenever a user logs in to an EC2 instance Use EC2 Instance Connect to log in to the instance

B. Deploy Auto Scaling groups by using AWS Cloud Formation Use the cfn-init helper script to deploy appropriate VPC routes for external access Rebuild the custom AMI so that the custom AMI includes AWS Systems Manager Agent

C. Deploy a NAT gateway and a bastion host that has internet access Create a security group that allows incoming traffic on all the EC2 instances from the bastion host Install AWS Systems Manager Agent on all the EC2 instances Use Auto Scaling group lifecycle hooks for monitoring and auditing access Use Systems Manager Session Manager to log into the instances Send logs to a log group m Amazon CloudWatch Log

D. Export data to Amazon S3 for auditing Send notifications to the security team by using S3 event notifications

E. Use EC2 Image Builder to rebuild the custom AMI Include the most recent version of AWS Systems Manager Agent in the Image Configure the Auto Scaling group to attach the AmazonSSMManagedinstanceCore role to all the EC2 instances Use Systems Manager Session Manager to log in to the instances Enable logging of session details to Amazon S3 Create an S3 event notification for new file uploads to send a message to the security team through an Amazon Simple Notification Service (Amazon SNS) topic

F. Use AWS Systems Manager Automation to build Systems Manager Agent into the custom AMI Configure AWS Configure to attach an SCP to the root organization account to allow the EC2 instances to connect to Systems Manager Use Systems Manager Session Manager to log in to the instances Enable logging of session details to Amazon S3 Create an S3 event notification for new file uploads to send a message to the security team through an Amazon Simple Notification Service (Amazon SNS) topic

A. Delete all objects, including previous versions, from the S3 bucket that contains the static website content

B. Update the weighted DNS record entry that points to the S3 bucke

C. Apply a weight of 0

D. Configure webpage redirect requests on the S3 bucket with a hostname that redirects to the ALB

E. Remove the weighted DNS record entry that points to the S3 bucket from the example

F. Wait for DNS propagation to become complete

A. Create an Amazon Aurora cluster in one Availability Zone across multiple Regions as the data store Use Aurora's automatic recovery capabilities in the event of a disaster

B. Create an Amazon Aurora global database in two Regions as the data stor

C. In the event of a failure promote the secondary Region as the primary for the application

D. Create an Amazon Aurora multi-master cluster across multiple Regions as the data stor

E. Use a Network Load Balancer to balance the database traffic in different Regions

F. Set up the application in two Regions and use Amazon Route 53 failover-based routing that points to the Application Load Balancers in both Region G

A. In Route 53 AR

B. create a new assertion safety rul

C. Apply the assertion safety rule to the two routing control

D. Configure the rule with the ATLEAST type with a threshold of 1

E. In Route 53 ARC, create a new gating safety rul

F. Apply the assertion safety rule to the two routing control G

A. Use batch writes to write multiple log events in a Single write operation

B. Write each log event as a single write operation

C. Treat each log as a single-measure record

D. Treat each log as a multi-measure record

E. Configure the memory store retention period to be longer than the magnetic store retention period

F. Configure the memory store retention period to be shorter than the magnetic store retention period

A. Deploy the application on AWS Elastic Beanstal

B. Deploy an Amazon RDS for MySQL DB instance as part of the Elastic Beanstalk configuration

C. Deploy the application on AWS Elastic Beanstal

D. Deploy a separate Amazon RDS for MySQL DB instance outside of Elastic Beanstalk

E. Configure a notification email address that alerts the application team in the AWS Elastic Beanstalk configuration

F. Configure an Amazon EventBridge rule to monitor AWS Health event G

A. In the logging account create a CloudWatch Logs destination with a destination polic

B. For each new account subscribe the CloudWatch Logs log groups to th

C. Destination Configure a single Amazon Kinesis data stream and a single Amazon Kinesis Data Firehose delivery stream to deliver the logs from the CloudWatch Logs destination to the S3 bucket

D. In the logging account create a CloudWatch Logs destination with a destination policy for each Regio

E. For each new account subscribe the CloudWatch Logs log groups to the destinatio

F. Configure a single Amazon Kinesis data stream and a single Amazon Kinesis Data Firehose delivery stream to deliver the logs from all the CloudWatch Logs destinations to the S3 bucket

A. Add a new stage in the CodePipeline pipeline after the stage that contains the CodeBuild projec

B. Create an Amazon S3 bucket to store the report

C. Configure an S3 deploy action type in the new CodePipeline stage with the appropriate path and format for the reports

D. Add a report group in the CodeBuild project buildspec file with the appropriate path and format for the report

E. Create an Amazon S3 bucket to store the report

F. Configure an Amazon EventBridge rule that invokes an AWS Lambda function to copy the reports to the S3 bucket when a build is complete G

A. Direct the security team to use CloudFormation to create new versions of the AMIs and to list! the AMI ARNs in an encrypted Amazon S3 object as part of the stack's Outputs Section Instruct the developers to use a cross-stack reference to load the encrypted S3 object and obtain the most recent AMI ARNs

B. Direct the security team to use a CloudFormation stack to create an AWS CodePipeline pipeline that builds new AMIs and places the latest AMI ARNs in an encrypted Amazon S3 object as part of the pipeline output Instruct the developers to use a cross-stack reference within their own CloudFormation template to obtain the S3 object location and the most recent AMI ARNs

C. Direct the security team to use Amazon EC2 Image Builder to create new AMIs and to place the AMI ARNs as parameters in AWS Systems Manager Parameter Store Instruct the developers to specify a parameter of type SSM in their CloudFormation stack to obtain the most recent AMI ARNs from Parameter Store

D. Direct the security team to use Amazon EC2 Image Builder to create new AMIs and to create an Amazon Simple Notification Service (Amazon SNS) topic so that every development team can receive notification

E. When the development teams receive a notification instruct them to write an AWS Lambda function that will update their CloudFormation stack with the most recent AMI ARNs

A. Configure provisioned concurrency on the Lambda function with a concurrency value of 1

B. Configure reserved concurrency on the Lambda function with a concurrency value of 0

C. Configure provisioned concurrency on the Lambda functio

D. Configure AWS Application Auto Scaling on the Lambda function with provisioned concurrency values set to a minimum of 1 and a maximum of 100

E. Configure reserved concurrency on the Lambda functio

F. Configure AWS Application Auto Scaling on the API Gateway API with a reserved concurrency maximum value of 100

A. Use AWS Systems Manager to create a new patch baseline including the custom repositor

B. Run the AWS-RunPatchBaseline document using the run command to verify and install patches

C. Use AWS Direct Connect to integrate the corporate repository and deploy the patchesusing Amazon CloudWatch scheduled events, then use the CloudWatch dashboard to create reports

D. Use yum-config-manager to add the custom repository under /etc/yum

E. Use AWS Systems Manager to create a new patch baseline including the corporate repositor

F. Run the AWS-AmazonLinuxDefaultPatchBaseline document using the run command to verify and install patches

A. Use an AWS CloudFormation template with a retention policy for the ALB set to 1 hou

B. Update the Amazon Route 53 record to reflect the new ALB

C. Use two AWS Elastic Beanstalk environments to perform a blue/green deployment from the original environment to the new on

D. Create an application version lifecycle policy to terminate the original environment in 1 hour

E. Use AWS CodeDeploy with a deployment group configured with a blue/green deployment configuration Select the option Terminate the original instances in the deployment group with a waiting period of 1 hour

F. Use AWS Elastic Beanstalk with the configuration set to Immutabl G

A. Create an AWS CloudFormation template that defines an AWS Inspector rule to check whether EBS encryption is enable

B. Save the template to an Amazon S3 bucket that has been shared with all accounts within the compan

C. Update the account creation script pointing to the CloudFormation template in Amazon S3

D. Create an AWS Config organizational rule to check whether EBS encryption is enabled and deploy the rule using the AWS CL

E. Create and apply an SCP to prohibit stopping and deleting AWS Config across the organization

F. Create an SCP in Organization G

A. Create an SCP that includes a Deny statement for changes to the auditing application's IAM rol

B. Include a condition that allows the trusted administrator IAM role to make change

C. Attach the SCP to the root of the organization

D. Create an SCP that includes an Allow statement for changes to the auditing application's IAM role by the trusted administrator IAM rol

E. Include a Deny statement for changes by all other IAM principal

F. Attach the SCP to the IAM service in each AWS account where the auditing application has an IAM role

A. Create a custom Docker image that contains all the dependencies tor the legacy application Store the custom Docker image in a new Amazon Elastic Container Registry (Amazon ECR) repository Configure a new AWS CodeBuild project to use the custom Docker image to build the deployable artifact and to save the artifact to the S3 bucket

B. Launch a new Amazon EC2 instance Install all the dependencies (or the legacy application on the EC2 instance Use the EC2 instance to build the deployable artifact and to save the artifact to the S3 bucket

C. Create a custom EC2 Image Builder image Install all the dependencies for the legacy application on the image Launch a new Amazon EC2 instance from the image Use the new EC2 instance to build the deployable artifact and to save the artifact to the S3 bucket

D. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster with an AWS Fargate profile that runs in multiple Availability Zones Create a custom Docker image that contains all the dependencies for the legacy application Store the custom Docker image in a new Amazon Elastic Container Registry (Amazon ECR) repository Use the custom Docker image inside the EKS cluster to build the deployable artifact and to save the artifact to the S3 bucket

A. Modify the CodeBuild projects within the pipeline to use a compute type with more available network throughput

B. Create a custom CodeBuild execution environment that includes a symmetricmultiprocessing configuration to run the builds in parallel

C. Modify the CodePipeline configuration to run actions for each Lambda function in parallel by specifying the same runorder

D. Modify each CodeBuild protect to run within a VPC and use dedicated instances to increase throughput

A. Create an Amazon EventBridge rule for the CloudTrail StopLogging even

B. Create an AWS Lambda (unction that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLogging was calle

C. Add the Lambda function ARN as a target to the EventBridge rule

D. Deploy the AWS-managed CloudTrail-enabled AWS Config rule set with a periodic interval to 1 hou

E. Create an Amazon EventBridge rule tor AWS Config rules compliance chang

F. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLoggmg was calle G

A. Replace the RDS Multi-AZ DB instance with an Amazon DynamoDB table

B. Configure an Amazon Simple Queue Service (Amazon SQS) queue as a destination of the Lambda function

C. Configure an Amazon Simple Queue Service (Amazon SQS> dead-letter queue for the SNS topic

D. Subscribe an Amazon Simple Queue Service (Amazon SQS) queue to the SNS topic Configure the Lambda function to process messages from the SQS queue

E. Replace the SNS topic with an Amazon EventBridge event bus Configure an EventBridge rule on the new event bus to invoke the Lambda function for each event

A. Add a stage to the CodePipeline pipeline between the source and deploy stage

B. Use AWS CodeBuild to create a runtime environment and build commands in the buildspec file to invoke test script

C. If errors are found, use the aws deploy stop-deployment command to stop the deployment

D. Add a stage to the CodePipeline pipeline between the source and deploy stage

E. Use this stage to invoke an AWS Lambda function that will run the test script

F. If errors are found, use the aws deploy stop-deployment command to stop the deployment

A. For the critical data, modify the existing Auto Scaling grou

B. Create a warm pool instance in the stopped stat

C. Define the warm pool siz

D. Create a new version of the launch template that has detailed monitoring enable

E. use Spot Instances

F. For the critical data, modify the existing Auto Scaling grou G

A. Add an IPv6 CIDR block to the VPC and the private subnet for the EC2 instance

B. Create route table entries for the IPv6 network, use EC2 instance types that support IPv6, and assign IPv6 addresses to each EC2 instance

C. Assign each EC2 instance an IPv6 Elastic IP addres

D. Create a target group, and add the EC2 instances as target

E. Create a listener on port 443 of the ALB, and associate the target group with the ALB

F. Replace the ALB with a Network Load Balancer (NLB)

A.

B.

C.

D. A

A. Use a buildspec file in AWS CodeBuild to restore the DB cluster from a snapshot of the production database run integration tests, and drop the restored database after verification

B. Deploy the application to productio

C. Configure an audit log of data control language (DCL) operations to capture database activities to perform if verification fails

D. Create a snapshot of the DB duster before deploying the application Use the Update requires Replacement property on the DB instance in AWS CloudFormation to deploy the application and apply the changes

E. Ensure that the DB cluster is a Multi-AZ deploymen

F. Deploy the application with the update G