SOA-C02 Exam Dumps : AWS Certified SysOps Administrator - Associate (SOA-C02)

ElastiCache for Redis offers Global Datastore, which:

Enables low-latency read access in multiple AWS Regions.

Allows read/write in the primary Region, and read-only in secondaries.

Provides data consistency across Regions, which meets the use case.

From ElastiCache Redis Global Datastore documentation:

Global Datastore replicates data between Regions using asynchronous replication. Supports cross-region read scalability.

Objective:

Receive a notification when both disk space usage and DiskReadOps exceed threshold values.

Composite Alarms:

Composite alarms allow combining multiple metric alarms into a single alarm. Notifications are triggered only when all conditions are met.

Steps to Implement:

Step 1: Install the CloudWatch agent on the EC2 instances and configure it to monitor disk space.

Step 2: Create individual metric alarms:

One for disk space usage.

One for the DiskReadOps metric.

Step 3: Create a composite alarm:

Include both metric alarms.

Configure the composite alarm to send notifications to the SNS topic when both conditions are met.

AWS References:

Composite Alarms in CloudWatch:Creating Composite Alarms

CloudWatch Agent Installation:Install CloudWatch Agent

Why Other Options Are Incorrect:

Option B: This would trigger notifications for either condition, not both simultaneously.

Option C: EBSByteBalance% is unrelated to free disk space.

Option D: Detailed monitoring is not required for composite alarms.

To control access to Amazon EC2 instances using AWS Systems Manager Session Manager based on specific tags:

Attach an IAM Policy to Users or Groups: Create and attach an Identity and Access Management (IAM) policy to the IAM users or groups who need access to the EC2 instances. This policy should specify the permissions required to use Session Manager to start sessions with the instances.

Create an IAM Policy with Tag-Based Conditions: Create an IAM policy that includes a condition element to allow access to EC2 instances based on specific tags. This policy can be designed to grant the ssm:StartSession permission only for instances that match certain tags, as defined in the condition block of the IAM policy. Here is a sample condition block that could be used:

"Condition": {

"StringEquals": {

"ec2:ResourceTag/YourTagName": "YourTagValue"

}

}

This ensures that only authorized users can initiate sessions with instances that have the specified tags, enhancing security and operational management.

By implementing these policies, you ensure that only the appropriate personnel have the controlled access required, based on the specific business needs and security guidelines.