Online Access Free AWS-Developer Exam Questions

A developer is using an AWS account to build an application that stores files in an Amazon S3 bucket. Files must be encrypted at rest by AWS KMS keys. A second AWS account must have access to read files from the bucket.
The developer wants to minimize operational overhead for the application.
Which combination of solutions will meet these requirements? (Select TWO.)

• A.Create a gateway endpoint for the S3 bucket. Modify the endpoint policy to grant s3:GetObject permissions to the second AWS account.
• B.Create a bucket policy for the S3 bucket that grants s3:GetObject permissions to the second AWS account.
• C.Use a customer managed key to encrypt the files. Create a key policy that grants kms: Decrypt permissions to the second AWS account.
• D.Create a service control policy (SCP) that grants s3:GetObject permissions to the second AWS account.
• E.Use an AWS managed key to encrypt the files. Create a key policy that grants kms:Decrypt permissions to the second AWS account.

A developer is writing an application to analyze the traffic to a fleet of Amazon EC2 instances. The EC2 instances run behind a public Application Load Balancer (ALB). An HTTP server runs on each of the EC2 instances, logging all requests to a log file.
The developer wants to capture the client public IP addresses. The developer analyzes the log files and notices only the IP address of the ALB.
What must the developer do to capture the client public IP addresses in the log file?

• A.Install the AWS X-Ray daemon on each EC2 instance. Configure the daemon to write to the log file.
• B.Add a Host header to the HTTP server log configuration file.
• C.Add an X-Forwarded-For header to the HTTP server log configuration file.
• D.Install the Amazon CloudWatch Logs agent on each EC2 instance. Configure the agent to write to the log file.

A developer is writing a web application that must share secure documents with end users. The documents are stored in a private Amazon S3 bucket. The application must allow only authenticated users to download specific documents when requested, and only for a duration of 15 minutes.
How can the developer meet these requirements?

• A.Modify the S3 bucket policy to only allow specific users to download the documents. Revert the change after 15 minutes.
• B.Create a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes.
• C.Copy the documents to a separate S3 bucket that has a lifecycle policy for deletion after 15 minutes.
• D.Use server-side encryption with AWS KMS managed keys (SSE-KMS) and download the documents using HTTPS.

A real-time messaging application uses Amazon API Gateway WebSocket APIs with backend HTTP service.
A developer needs to build a feature in the application to identify a client that keeps connecting to and disconnecting from the WebSocket connection. The developer also needs the ability to remove the client Which combination of changes should the developer make to the application to meet these requirements?
(Select TWO.)

• A.Add code to track the client status in Amazon ElastiCache in the backend service.
• B.Switch to HTTP APIs in the backend service.
• C.Implement $connect and $disconnect routes in the backend service.
• D.Switch to REST APIs in the backend service.
• E.Use the callback URL to disconnect the client from the backend service.

A developer is configuring an applications deployment environment in AWS CodePipeine. The application code is stored in a GitHub repository. The developer wants to ensure that the repository package's unit tests run in the new deployment environment. The deployment has already set the pipeline's source provider to GitHub and has specified the repository and branch to use in the deployment.
When combination of steps should the developer take next to meet these requirements with the least the LEAST overhead' (Select TWO).

• A.Create an AWS CodeBuid project. Add the repository package's build and test commands to the projects buildspec
• B.Add an action to the source stage. Specify the newly created project as the action provider. Specify the build attract as the actions input artifact.
• C.Create an AWS CodeCommt project. Add the repository package's build and test commands to the protects buildspec
• D.Create an AWS CodeDeploy protect. Add the repository package's build and test commands to the project's buildspec
• E.Add a new stage to the pipeline alter the source stage. Add an action to the new stage. Speedy the newly created protect as the action provider. Specify the source artifact as the action's input artifact.