SOA-C01 Exam Dumps : AWS Certified SysOps Administrator - Associate

Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).

Create an origin access identity and grant it permissions to read objects in the S3 bucket.

Assign an 1AM user to the CloudFront distribution and whitelist the 1AM user in the S3 bucket policy.

Assign an 1AM role to the CloudFront distribution and whitelist the 1AM role in the S3 bucket policy.

Change the number of instances patched at any one time to 100%.

Create a snapshot of each server in the fleet using a Systems Manager Automation document before starting the patch process.

Configure the maintenance window to patch 10% of the instance in the patch group at a time.

Create a patched Amazon Machine Image (AMI). Configure the maintenance window option to deploy the patched AMI on only 10% of the fleet at a time.

Copy an automated RDS snapshot to the security account using the copy-db-snapshot command with the AWS CLI.

Create an RDS MySQL Read Replica for the critical database in the security account, then enable automatic backups for the Read Replica.

Create an RDS snapshot with the AWS CLI create-db-snapshot command, share it with the security account, then create a copy of the shared snapshot in the security account.

Use AWS DMS to replicate data from the critical database to another RDS MySQL instance in the security account, then use an automated backup for the RDS instance.