Amazon Web Services Updated SOA-C02 Exam Questions and Answers by jeremiah

To improve RDS performance during peak traffic when resources are over-utilized due to read traffic, the SysOps administrator can take the following actions:

Add a Read Replica:

Amazon RDS Read Replicas provide enhanced performance and durability for database instances.

By creating a read replica, you can offload read traffic from the primary database instance to the replica.

This reduces the load on the primary instance and improves overall performance.

Amazon RDS does not support enabling encryption for an existing unencrypted DB instance directly. However, you can achieve encryption by following these steps:

Take a Snapshot of the RDS Instance:

Open the Amazon RDS console at Amazon RDS Console.

Select the DB instance, then choose Actions and Take snapshot.

Enter a name for the snapshot and take the snapshot.

Copy and Encrypt the Snapshot:

After the snapshot is complete, select the snapshot, choose Actions, and then Copy snapshot.

In the copy snapshot dialog, select the Enable encryption checkbox and choose a customer-managed CMK (Customer Master Key) or the default AWS managed key.

Restore the Encrypted Snapshot to a New RDS Instance:

Once the snapshot copy is complete, select the copied (encrypted) snapshot.

Choose Actions and Restore snapshot.

Provide the required details to launch a new DB instance from the encrypted snapshot.

Update Connections:

Update your application or endpoints to point to the new encrypted RDS instance.

References:

Encrypting Amazon RDS Resources

Copying an Amazon RDS DB Snapshot

Here are the steps to update an existing AWS CloudFormation stack:

Log in to the AWS Management Console and navigate to the CloudFormation service in the us-east-2 Region.

Find the existing stack named 1700182 and click on it.

Click on the "Update" button.

Choose "Replace current template" and upload the updated CloudFormation template from the Amazon S3 bucket named "cloudformation-bucket"

In the "Parameter" section, update the EC2 instance type to us-east-t2.nano and add the IP address range 192.168.100.0/30 for SSH access.

Replace the instance profile IAM role with IamRoleB.

In the "Capabilities" section, check the checkbox for "IAM Resources"

Choose the role CFServiceR01e and click on "Update Stack"

Wait for the stack to be updated.

Once the update is complete, navigate to the stack and click on the "Stack options" button, and select "Prevent updates to prevent accidental deletion"

To get the value of the Prodlnstanceld , navigate to the "Outputs" tab in the CloudFormation stack and find the key "Prodlnstanceld". The value corresponding to it is the value that you need to enter in the text box below.

Note:

You can use AWS CloudFormation to update an existing stack.

You can use the AWS CloudFormation service role to deploy updates.

You can refer to the AWS CloudFormation documentation for more information on how to update and manage stacks: https://aws.amazon.com/cloudformation/

Here are the steps to configure Amazon EventBridge to meet the above requirements:

Log in to the AWS Management Console by using the AWS Management Console shortcut from the VM desktop. Make sure that you are logged in to the desired AWS account.

Go to the EventBridge service in the us-east-2 Region.

In the EventBridge service, navigate to the "Event buses" page.

Click on the "Create event bus" button.

Give a name to your event bus, and select "default" as the event source type.

Navigate to "Rules" page and create a new rule named "RunFunction"

In the "Event pattern" section, select "Schedule" as the event source and set the schedule to run every 15 minutes.

In the "Actions" section, select "Send to Lambda" and choose the existing AWS Lambda function named "LogEventFunction"

Create another rule named "SpotWarning"

In the "Event pattern" section, select "EC2" as the event source, and filter the events on "EC2 Spot Instance interruption"

In the "Actions" section, select "Send to SNS topic" and create a new standard Amazon SNS topic named "TopicEvents"

In the "Input Transformer" section, set the Input Path to {“instance” : “$.detail.instance-id”} and Input template to “The EC2 Spot Instance has been interrupted on account.

Now all Amazon EC2 events in the default event bus will be replayable for past 90 days.

Note:

You can use the AWS Management Console, AWS CLI, or SDKs to create and manage EventBridge resources.

You can use CloudTrail event history to replay events from the past 90 days.

You can refer to the AWS EventBridge documentation for more information on how to configure and use the service: https://aws.amazon.com/eventbridge/