Question 1

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords. Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?

Options :

A : Amazon Cognito user pools and identity pools

B : Amazon Cognito identity pools and AWS IAM

C : Amazon Cognito user pools and AWS KMS

D : Amazon Cognito identity pools and AWS STS

Answer: A

Question 2

A company has implemented AWS CodePipeline to automate its release pipelines. The Development team is writing an AWS Lambda function that will send notifications for state changes of each of the actions in the stages.

Which steps must be taken to associate the Lambda function with the event source?

Options :

A : Create an Amazon CloudWatch Events rule that uses CodePipeline as an event source

B : Create an Amazon CloudWatch alarm that monitors status changes in CodePipeline and triggers the Lambda function

C : Create a trigger that invokes the Lambda function from the Lambda console by selecting CodePipeline as the event source

D : Create an event trigger and specify the Lambda function from the CodePipeline console

Answer: A

Question 3

A Developer needs to access AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:

1. {

2. "version": "2012-10-17"

3. "Statement": [

4. {

5. "Effect": "Allow",

6. "Action": [

7. "codecommit:BatchGetRepositories",

8. "codecommit:Get*"

9. "codecommit:List*",

10. "codecommit:GitPull"

11. ],

12. "Resource": "*"

13. }

14. ]

15. }

The Developer needs to create/delete branches.

Which specific IAM permissions need to be added based on the principle of least privilege?

Options :

A : “codecommit:*”

B : “codecommit:CreateBranch” and “codecommit:DeleteBranch”

C : “codecommit:Put*:”

D : “codecommit:Update*”

Answer: B

Question 4

An application uses Amazon EC2 instances, AWS Lambda functions and an Amazon SQS queue. The Developer must ensure all communications are within an Amazon VPC using private IP addresses. How can this be achieved? (Select TWO.)

Options :

A : Create a VPC endpoint for Amazon SQS

B : Create a VPN and connect the services to the VPG

C : Create a VPC endpoint for AWS Lambda

D : Add the AWS Lambda function to the VPC

E : Create the Amazon SQS queue within a VPC

Answer: A,D

Question 5

A developer is building an event-driven application by using AWS Lambda and Amazon EventBridge. The Lambda function needs to push events to an EventBridge event bus. The developer uses an SDK to run the PutEvents EventBridge action and specifies no credentials in the code. After deploying the Lambda function, the developer notices that the function is failing and there are AccessDeniedException errors in the logs.

How should the developer resolve this issue?

Options :

A : Configure a VPC peering connection between the Lambda function and EventBridge.

B : Modify their AWS credentials to include permissions for the PutEvents EventBridge action.

C : Modify the Lambda function execution role to include permissions for the PutEvents EventBridge action.

D : Add a resource-based policy to the Lambda function to include permissions for the PutEvents EventBridge action.

Answer: C