AWS modul 2-5 cloud developing

What are the last three phases of the SDLC (after plan, define, and design)?

Develop, deploy, and maintain

Which task is performed during the develop stage of the SDLC?

New components are obtained and installed (testing also happens here)

Which AWS service should an administrator use to assign a new developer to a developer group?

AWS Identity and Access Management (IAM)

Which of the following is an important benefit of AWS CloudShell?

It inherits your credentials from the AWS Management Console

What are three ways to interact with AWS service APIs? (pick 3)

AWS Management Console, AWS CLI, AWS SDKs

Which tool enables users to control AWS services from the command line and automate service management with scripts?

AWS Tools for PowerShell

What is Amazon Q Developer?

A generative AI-powered coding assistant

Which statements describe AWS resource APIs? (pick 2)

They provide access to resources through objects and collections; They have at least one class per conceptual resource

Which method enables a Boto3 developer to specify the AWS Region?

By setting the Region when they instantiate the service client

Which HTTP response code series does a developer receive when calling an API on an S3 bucket that doesn't exist?

400 series

Which option is a use case for Amazon S3?

Data lake

What organizes the Amazon S3 namespace at the highest level?

Bucket

A developer receives a BucketAlreadyExists error. What must they do?

Rename the bucket — S3 bucket names are globally unique

Which URL is the virtual-hosted-style URL for an S3 static website in bucket "frank-martha-cafe" in us-east-1?

https://frank-martha-cafe.s3-website-us-east-1.amazonaws.com

After versioning is enabled on an S3 bucket, can it be disabled?

False — it can only be suspended, never fully disabled

What is the largest object size uploadable to S3 in a single PUT operation?

5 GB

Which mechanism should a developer apply to an S3 bucket to grant an IAM user full access, following AWS recommendations?

Bucket policy

What can a developer share to grant time-limited access to a private S3 object without requiring AWS credentials?

A presigned URL

Which method encrypts S3 objects in transit?

SSL/TLS

A static website in S3 references images from another S3 bucket, but they don't display. What is likely the problem?

CORS has not been enabled on the bucket where the assets are stored

Which two options is the AWS customer responsible for under the shared responsibility model?

Security group configuration and client-side data

Which IAM resource explicitly grants or denies permissions to a user or group?

IAM policies

What is the correct term for the process of verifying a user's identity?

Authentication

Which two statements about IAM user authentication are true?

AWS credentials must be provided to authenticate with services; A username and password must be provided to authenticate to the console

What is the AWS recommendation for securing credentials for applications running on EC2?

Create an IAM role and attach it to the EC2 instance

In what format are IAM policies written?

JSON

A policy is attached to an IAM group — what type of policy is this?

Identity-based policy

Which statement reflects best practice when granting IAM permissions?

Create policies that follow the principle of least privilege

A policy uses "Effect: Deny" with "NotResource" listing specific ARNs. What is the effect?

Denies actions on DynamoDB and S3 for all resources EXCEPT the ones listed in NotResource

Which two statements about IAM policy evaluation logic are true?

An explicit deny overrides an explicit allow; By default, all requests are denied

Which statement best describes Amazon DynamoDB?

A key-value and document database that scales horizontally and works well for internet-scale applications

Which component is part of a DynamoDB table?

Attributes

A DynamoDB table has a partition key (sensor ID) and a sort key (timestamp). Which statement is true?

It is impossible for two items to have the same primary key (combination of partition key + sort key)

Which statement about DynamoDB partitions is true?

If a table has a simple primary key, DynamoDB stores and retrieves each item based on its hash attribute

A developer wants to query a DynamoDB table by cuisine type and customer rating (not part of the primary key). What should they do?

Set up a global secondary index (GSI) on cuisine and customer rating

What DynamoDB feature should be used to manage complex, all-or-nothing changes across multiple items?

DynamoDB transactions

Which two scenarios are use cases for DynamoDB Streams?

Sending notifications when a friend uploads a picture; Monitoring table changes and taking action when a value hits a threshold

Which statement about DynamoDB global tables is true?

When a global table is created, DynamoDB automatically creates identical tables and propagates data changes to specified Regions

How far back can a DynamoDB table be restored using point-in-time recovery?

The last 35 days

Which DynamoDB API operations are considered control operations?

Create and manage DynamoDB tables