aws final

Question 1

if you need to keep an audit trail of who used encryption keys what service would you use?

Answer 1

Customer manager keys stored in key management service

Question 2

if you want to run a suite of containerized applications in AWS in a cloud agnostic way what would you use?

Answer 2

Elastic kubernetes service

Question 3

How would you migrate an aurora server to aurora serverless?

Answer 3

use database migration service to migrate to a new aurora serverless database

Question 4

If a group of ECS container instances behind a ALB are over burdened how would you automatically scale up?

Answer 4

create a scaling policy that scales out the ECS service when the service’s metrics are too high. You can monitor average CPU, Memory utilization and request count.

Question 5

how do you ensure that objects in an S3 repo with object-level versioning enabled cannot be overwritten or deleted by any user in a 1 year period?

Answer 5

Use compliance mode with a retention period of 1 year. If you use a legal hold a user with permissions can remove the hold then delete the object.