SAA-C03 Exam Dumps : AWS Certified Solutions Architect - Associate (SAA-C03)

Use S3 Object Lock In governance mode with a legal hold of 1 year

Use S3 Object Lock in compliance mode with a retention period of 365 days.

Use an IAM role to restrict all users from deleting or changing objects in the S3 bucket Use an S3 bucket policy to only allow the IAM role

Configure the S3 bucket to invoke an AWS Lambda function every tune an object is added Configure the function to track the hash of the saved object to that modified objects can be marked accordingly

Replace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to allow internet traffic.

Move the EC2 instances to public subnets. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.

Update the route tables for the EC2 instances’ subnets to send 0.0.0.0/0 traffic through the internet gateway route. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.

Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

Enable MFA on the root account. Ensure that all administrators use the root account to perform administrative actions.

Create an IAM policy that requires MFA to be enabled for the IAM roles that administrators assume to perform administrative actions.

Configure an Amazon CloudWatch alarm that sends an email notification when an administrator performs an administrative action without MFA.

Use AWS Config to periodically audit IAM users and to automatically attach an IAM policy that requires MFA when AWS Config detects administrative actions.