Correct Answer : Get Lastest Questions and Answer : Amazon SNS can be used with other AWS services such as Amazon SQS, Amazon EC2 and Amazon S3. Here is an example of how an order processing workflow system uses Amazon SNS with Amazon EC2, SQS, and SimpleDB. In this workflow system, messages are sent between application components whenever a transaction occurs or an order advances through the order processing pipeline. When a customer initially places an order, the transaction is first recorded in Amazon SimpleDB and an application running on Amazon EC2 forwards the order request to a payment processor which debits the customers credit card or bank account. Once approved, an order confirmation message is published to an Amazon SNS topic. In this case, the topic has various subscribers over Email or HTTP merchant, customer and supply chain partners and notifications sent by Amazon SNS for that topic can instantly update all of them that payment processing was successful. Notifications can also be used to orchestrate an order processing system running on EC2, where notifications sent over HTTP can trigger real time processing in related components such as an inventory system or a shipping service. By integrating Amazon SNS with Amazon SQS, all notifications delivered are also persisted in an Amazon SQS queue where they are processed by an auditing application at a future time.
Question : Select which applies correctly for the topic security.
1. All API calls made to Amazon SNS are validated for the users AWS Id and the signature 2. Topics can only be created by users with valid AWS IDs who have signed up for Amazon SNS 3. Access Mostly Uused Products by 50000+ Subscribers 4. Only 1 and 2 are correct 5. All 1,2 and 3 are correct
Correct Answer : Get Lastest Questions and Answer : All API calls made to Amazon SNS are validated for the users AWS Id and the signature. In addition, we recommend that users secure their data over the wire by connecting to our secure SSL end-points.
Topics can only be created by users with valid AWS IDs who have signed up for Amazon SNS. The easiest way to create a topic is to use the AWS Management Console. It can also be created through the CreateTopic API.
A topic owner can set explicit permissions to allow more than one user (with a valid AWS ID) to publish to a topic. By default, only topic owners have permissions to publish to a topic.
The AddPermission and RemovePermission APIs provide a simple interface for developers to add and remove permissions for a topic. However, for conditional access and more advanced use cases, users should use access control policies to manage permissions.
Question : Which of the following items are required to allow an application deployed on an EC instance to write data to a DynamoDB table? Assume that no security keys are allowed to be stored on the EC2 instance.
A. Create an IAM Role that allows write access to the DynamoDB table. B. Add an IAM Role to a running EC2 instance. C. Create an IAM User that allows write access to the DynamoDB table. D. Add an IAM User to a running EC2 instance. E. Launch an EC2 Instance with the IAM Role included in the launch configuration.
May be this will help someone like me. I could not find a way to change the IAM role on an existing instance note 'existing' not running. Even if you stop the instance there is no option to change the IAM role. You have to launch the instance from scratch to be able to select the role. There are two work arounds that suited me
1) if you selected any role when launching the instance (default is none), you can simply go to the IAM console and update the settings for that role to reflect whatever you want to do and it should take affect immediately even if the instance is running.
2) if you have to start from scratch, create an AMI of existing instance and use that AMI to launch and during the launch REMEMBER to select the role you created (default is none) and in this way you can quickly get the role to take effect instead of doing everything from scratch.
1. You have logged in from windows EC2 instance which send request over internet however, patch download will fail. Because, you can send request on internet but incoming is denied.
2. You have logged in from windows EC2 instance which send request over internet, patch download will success.