D319 AWS Cloud Architecture - Set 4 - Part 1

Correct Answer: AWS Control Tower

AWS Control Tower offers centralized governance and management across AWS accounts and helps organizations manage multiple AWS accounts with policies and guardrails.

Correct Answer: File storage

Amazon FSx for Windows File Server provides file storage that is accessible by EC2 instances over the SMB protocol.

Correct Answer: Amazon CloudFront

Amazon CloudFront is a content delivery network (CDN) service that accelerates the delivery of web content by caching copies at edge locations closer to users.

Correct Answer: AWS Systems Manager Session Manager

AWS Systems Manager Session Manager provides secure, browser-based SSH access to EC2 instances without needing to open inbound SSH ports.

Correct Answer: Unlimited

Amazon DynamoDB automatically scales in storage capacity, meaning there is no limit on the size of a DynamoDB table.

Correct Answer: Reserved Instances

Reserved Instances provide a discounted hourly rate for EC2 usage in exchange for committing to a specific instance type for a 1- or 3-year term.

Correct Answer: User activity and API calls

AWS CloudTrail tracks user activity and records API calls made in your AWS account, providing visibility into actions performed on AWS resources.

Correct Answer: PostgreSQL

PostgreSQL supports geospatial queries through its PostGIS extension, allowing for spatial database operations.

Correct Answer: AWS IAM

AWS Identity and Access Management (IAM) allows users to manage permissions and policies for controlling access to AWS resources.

Correct Answer: AWS Step Functions

AWS Step Functions allow you to define workflows as state machines, coordinating tasks in distributed applications.

Correct Answer: AWS ElastiCache

AWS ElastiCache helps improve the performance of read-heavy applications by caching frequently accessed data in-memory.

Correct Answer: To move objects to different storage classes over time

Amazon S3 lifecycle policies automate the transition of objects between different storage classes based on predefined criteria, such as object age.

Correct Answer: AWS CloudWatch

AWS CloudWatch monitors AWS resources in real-time and provides metrics for CPU utilization, memory usage, and more.

Correct Answer: Amazon ElastiCache

Amazon ElastiCache provides a fully managed, highly available in-memory cache service to accelerate the performance of applications.

Correct Answer: To provide internet access for instances in private subnets

A NAT Gateway provides internet access to instances in private subnets by translating private IP addresses to a public IP address.

Correct Answer: Amazon EKS

Amazon Elastic Kubernetes Service (EKS) is a managed service that helps you run and deploy Kubernetes-based applications using Docker containers.

Correct Answer: To detect security threats

Amazon GuardDuty detects and analyzes potential security threats in your AWS environment by using machine learning and threat intelligence.

Correct Answer: Amazon Route 53

Amazon Route 53 is a highly available DNS web service that provides DNS resolution for applications hosted on AWS.

Correct Answer: AWS Lambda

AWS Lambda enables users to run code without provisioning or managing any servers by triggering functions in response to events.

Correct Answer: To act as a virtual firewall for EC2 instances

AWS Security Groups act as virtual firewalls that control inbound and outbound traffic to EC2 instances.