You have an application running on an EC2 instance which will allow users to download files from a private S3
bucket using a pre-signed URL. Before generating the URL, the application should verify the existence of the
file in S3. How should the application use AWS credentials to access the S3 bucket securely?

You are designing a data leak prevention solution for your VPC environment. You want your VPC Instances to
be able to access software depots and distributions on the Internet for product updates. The depots and
distributions are accessible via third party CDNs by their URLs. You want to explicitly deny any other outbound
connections from your VPC instances to hosts on the internet.
Which of the following options would you consider?

You are running a successful multitier web application on AWS and your marketing department has asked you
to add a reporting tier to the application. The reporting tier will aggregate and publish status reports every 30
minutes from user-generated information that is being stored in your web application s database. You are
currently running a Multi-AZ RDS MySQL instance for the database tier. You also have implemented
Elasticache as a database caching layer between the application tier and database tier. Please select the
answer that will allow you to successfully implement the reporting tier with as little impact as possible to your
database.

A company is running a batch analysis every hour on their main transactional DB, running
on an RDS MySQL instance, to populate their central Data Warehouse running on Redshift. During the
execution of the batch, their transactional applications are very slow. When the batch completes they need to
update the top management dashboard with the new dat

Your fortune 500 company has under taken a TCO analysis evaluating the use of Amazon S3 versus acquiring
more hardware The outcome was that ail employees would be granted access to use Amazon S3 for storage of
their personal documents.
Which of the following will you need to consider so you can set up a solution that incorporates single sign-on
from your corporate AD or LDAP directory and restricts access for each user to a designated user folder in a
bucket? (Choose 3 Answers)

Which is a valid Amazon Resource name (ARN) for IAM?