AWS Networking and Architecture Solutions

VPC Endpoint for Private Network Connectivity

• An application running on an EC2 instance in a VPC needs to access an S3 bucket without internet connectivity
• The solution is to create a gateway VPC endpoint to the S3 bucket

Duplicated EC2 Instances and EBS Volumes with Load Balancer

• A web application hosted on AWS using two EC2 instances and EBS volumes in different Availability Zones behind an Application Load Balancer experiences an issue where users see only a subset of their documents, never all at once.
• The proposed solution is to copy the data from both EBS volumes to Amazon EFS (Elastic File System) and modify the application to save new documents to EFS, ensuring users see all their documents.

Modernizing Legacy Architecture with Scalability and Resiliency

• A company is modernizing their application with a primary server coordinating jobs across multiple compute nodes.
• The solution is to implement both the primary server and compute nodes with EC2 instances managed in an Auto Scaling group.
• Configure AWS CloudTrail as a destination for the jobs and configure EC2 Auto Scaling based on the load on the primary server.

Increasing Storage Space with Low Latency Access for Recently Accessed Files

• A company is running an SMB file server storing large files frequently accessed for the first few days after creation, and the files are rarely accessed after 7 days.
• The total data size is increasing and approaching the company's storage capacity.
• The solutions architect wants to increase available storage space without losing low-latency access to the most recently accessed files.
• The solution is to use an Amazon S3 bucket for file storage along with an Amazon S3 Lifecycle policy to move files to a less expensive storage tier after 7 days when access is infrequent. This ensures low-latency access to recently accessed files while optimizing for cost on older, less accessed files.

Providing Access to CloudWatch Dashboard to a User Without AWS Account

• A company is launching a new application and wants to provide access to the CloudWatch dashboard to a user who does not have an AWS account.
• The principle of least privilege should be followed.
• The solution is to create an IAM user specifically for the user, attach the CloudWatchReadOnlyAccess AWS managed policy to the user, and share the login credentials and the browser URL of the dashboard with the user.

Ensuring Lambda Function Ingests All Data From an SNS Topic

• A Lambda function is triggered by an SNS topic, but not ingesting all data.
• Two solutions are required:
  • Create an Amazon SQS queue and subscribe it to the SNS topic, making the Lambda function read from the SQS queue.
  • Increase provisioned throughput for the Lambda function to handle the incoming data volume.

Automating Remediation for Personally Identifiable Information (PII) in Files Uploaded via SFTP

• A company is receiving files uploaded via SFTP, some containing PII, and wants to automate the process of detecting and remediating PII in these files.
• The solution is to utilize an AWS Lambda function and trigger it when objects are loaded into the S3 bucket. The Lambda function should implement custom scanning algorithms to detect PII and use Amazon SNS to notify administrators if PII is found.

Storing Accounting Records in Amazon S3 with Long-Term Retention and Deletion Prevention

• A company needs to store accounting records in Amazon S3 with immediate access for 1 year followed by archiving for 9 years, ensuring no deletion is possible by anyone, including administrative or root users.
• The solution is to use an S3 Lifecycle policy to transition the records from S3 Standard to S3 Glacier Deep Archive after 1 year. Use S3 Object Lock in compliance mode for a period of 10 years, preventing deletion even by administrative users.

Synchronizing Windows File Shares between Amazon EC2 Instances

• A company runs multiple Windows workloads on AWS, with employees using Windows file shares hosted on two Amazon EC2 instances.
• The file shares need to synchronize data and maintain duplicate copies.
• The solution is to use a dedicated file server (like Amazon WorkSpaces) for synchronization and utilize centralized user authentication and authorization.

This quiz covers essential solutions for AWS networking and application architecture. It includes topics like VPC endpoints for S3 access, managing EC2 instances with Load Balancers, and modernizing legacy systems for scalability and resiliency. Test your knowledge on these critical AWS concepts.