Question : Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers A. By default, all requests are denied B. An explicit allow overrides an explicit deny C. An explicit allow overrides default deny. D. An explicit deny does not override an explicit allow E. By default, all request are allowed
When a request is made, the AWS service decides whether a given request should be allowed or denied. The evaluation logic follows these rules:
By default, all requests are denied. (In general, requests made using the account credentials for resources in the account are always allowed.)
An explicit allow overrides this default.
An explicit deny overrides any allows.
The order in which the policies are evaluated has no effect on the outcome of the evaluation. All policies are evaluated, and the result is always that the request is either allowed or denied.
Question : Which of the following are valid arguments for an SNS Publish request? Choose answers A. TopicArn B. Subject C. Destination D. Format E. Message F. Language 1. A,B,C 2. A,C,E 3. Access Mostly Uused Products by 50000+ Subscribers 4. C,D,E
Explanation: SNS Publish : Sends a message to all of a topic's subscribed endpoints. When a messageId is returned, the message has been saved and Amazon SNS will attempt to deliver it to the topic's subscribers shortly. The format of the outgoing message to each subscribed endpoint depends on the notification protocol selected.
To use the Publish action for sending a message to a mobile endpoint, such as an app on a Kindle device or mobile phone, you must specify the EndpointArn. The EndpointArn is returned when making a call with the CreatePlatformEndpoint action. The second example below shows a request and response for publishing to a mobile endpoint. Request Parameters Message The message you want to send to the topic. MessageAttributes.entry.N Message attributes for Publish action. MessageStructure Set MessageStructure to json if you want to send a different message for each protocol. For example, using one publish action, you can send a short message to your SMS subscribers and a longer message to your email subscribers. Subject Optional parameter to be used as the "Subject" line when the message is delivered to email endpoints. This field will also be included, if present, in the standard JSON messages delivered to other endpoints. TargetArn Either TopicArn or EndpointArn, but not both. TopicArn The topic you want to publish to.
Question :
Select the correct statement for Amazon VPC 1. When you create a VPC, it automatically create an DHCP option "domain-name-servers=AmazonProvidedDNS" and associate it with the VPC. 2. DHCP does not automatically associates the DNS Server, for the instances that need to communicate over the VPC's internet gateway. 3. Access Mostly Uused Products by 50000+ Subscribers 4. Only 1 and 3 are correct 5. All 1,2 and 3 are correct.
When you create a VPC, we automatically create a set of DHCP options and associate them with the VPC. This set includes only a single option: domain-name-servers=AmazonProvidedDNS. This is an Amazon DNS server, and this option enables DNS for instances that need to communicate over the VPC's Internet gateway. The string AmazonProvidedDNS maps to a DNS server running on a reserved IP address at the base of the VPC network range "plus two". For example, the DNS Server on a 10.0.0.0/16 network is located at 10.0.0.2.
After you create a set of DHCP options, you can't modify them. If you want your VPC to use a different set of DHCP options, you must create a new set and associate them with your VPC. You can also set up your VPC to use no DHCP options at all.
You can have multiple sets of DHCP options, but you can associate only one set of DHCP options with a VPC at a time. If you delete a VPC, the DHCP options set associated with the VPC are also deleted.
After you associate a new set of DHCP options with a VPC, any existing instances and all new instances that you launch in the VPC use these options. You don't need to restart or relaunch the instances. They automatically pick up the changes within a few hours, depending on how frequently the instance renews its DHCP lease. If you want, you can explicitly renew the lease using the operating system on the instance.
1. Atomic Counters 2. Extra API read calls to determine if the data was updated before the update call is made 3. Conditional Writes 4. Eventual Consistency