Amazon Web Services Updated SOA-C02 Exam Questions and Answers by romilly

To immediately notify software developers if an AWS Lambda function experiences an error, follow these steps:

Create an SNS Topic:

Navigate to the Amazon SNS console and create a new topic.

Add email subscriptions for each developer to the SNS topic.

Step-by-Step Explanation:

Understand the Problem:

A user cannot upload an object to an S3 bucket using a presigned URL, even though the URL is valid and the bucket has no policy applied.

Analyze the Requirements:

Determine the cause of the issue preventing the upload via the presigned URL.

Evaluate the Options:

Option A: The user has not properly configured the AWS CLI.

CLI configuration is not relevant to using a presigned URL.

Option B: The SysOps administrator does not have the necessary permissions.

The administrator's permissions are required to generate a valid presigned URL with sufficient permissions.

Option C: A bucket policy is required.

A bucket policy is not necessary if the presigned URL has the correct permissions.

Option D: The object has already been uploaded.

A presigned URL remains valid until it expires or the specified permissions are revoked.

Select the Best Solution:

Option B: Ensuring that the SysOps administrator has the necessary permissions to upload objects to the S3 bucket is crucial for generating valid presigned URLs.

Amazon S3 Presigned URLs

IAM Policies for Amazon S3

The SysOps administrator must have the necessary permissions to upload objects to the S3 bucket, ensuring that the presigned URL generated allows the user to upload successfully.

To view a list of security groups that are open to the internet on port 3389, the most appropriate tool is AWS Trusted Advisor.

AWS Trusted Advisor:

AWS Trusted Advisor provides real-time guidance to help you provision your resources following AWS best practices.

It includes a security check that identifies security groups with unrestricted access.

Using Trusted Advisor:

Go to the AWS Trusted Advisor console.

In the "Security" category, look for the check that identifies security groups with unrestricted access.

Review the report to find security groups that allow unrestricted access on port 3389 (RDP).

AWS Trusted Advisor

AWS Trusted Advisor Best Practices

To resolve the issue of an AWS Lambda function unable to connect to a database that has been moved to a private subnet, the Lambda function needs to be connected to the same VPC as the database. This is done by configuring the Lambda function with VPC access. This involves specifying the VPC, subnets, and security groups for the Lambda function so that it can communicate with the database using its private endpoint. Option B is correct as it directly addresses the issue without compromising security. AWS documentation on configuring VPC access for Lambda provides guidance on this setup Configuring VPC Access for Lambda.