What happens, by default, when one of the resources in a CloudFormation stack cannot be created?

After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet
you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When
you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful.
Which of the following steps could resolve the issue?

Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook
account and the game will record player data and scoring information directly to a DynamoDB table. What is the most
secure approach for signing requests to the DynamoDB API?

Which of the following is chosen as the default region when making an API call with an AWS SDK?

Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of
their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure
of the premier content to non-paying website visitors. How can Company A provide only paid subscribers the ability to
download a premier content file in the S3 bucket?

You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find
out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective
method to mitigate this?

If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme
would give optimal performance on S3?

You are writing to a DynamoDB table and receive the following exception:” ProvisionedThroughputExceededException”.
though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput. What
could be an explanation for this?

You attempt to store an object in the US-STANDARD region in Amazon S3, and receive a confirmation that it has been
successfully stored. You then immediately make another API call and attempt to read this object. S3 tells you that the
object does not exist. What could explain this behavior?

A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec
VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can
only access an S3 keyspace specific to the user. Which two approaches can satisfy the objectives? Choose 2 answers.