Free Access Amazon Web Services SOA-C02 New Release

Problem Analysis:

The Cache-Control header (max-age=1 hour) conflicts with the CloudFront Maximum TTL setting (5 minutes).

CloudFront adheres to the lower of the two settings, leading to assets being cached for only 5 minutes.

Understanding Cache Behavior in CloudFront:

CloudFront evaluates headers such as Cache-Control and Expires along with its TTL settings.

The effective cache duration is the minimum value among these settings.

Resolution:

Align the Cache-Control max-age header and CloudFront Maximum TTL settings:

Update the CloudFront behavior to use a consistent value (e.g., set both to 1 hour).

Why Other Options Are Incorrect:

A: The Expires header value is irrelevant as CloudFront primarily considers Cache-Control and TTL settings.

B: The issue is not about expiring cached assets but about the duration of cache retention.

C: Cache invalidation is not required as it addresses purging specific objects from cache.

References:

Amazon CloudFront Caching

Cache Behavior Settings in CloudFront

To receive email notifications when IAM CreateUser API calls are made, you need to create an EventBridge rule that captures these events from CloudTrail and then routes them to an SNS topic that has an email subscription.

Enable CloudTrail:

Ensure AWS CloudTrail is enabled in your account to log API activity. Go to AWS CloudTrail Console and enable it if not already enabled.

Create SNS Topic:

Open the Amazon SNS console at Amazon SNS Console.

Create a new topic and name it (e.g., IAMCreateUserNotifications).

Create an email subscription for the topic by entering your email address and confirming the subscription via the email received.

Create EventBridge Rule:

Open the Amazon EventBridge console at Amazon EventBridge Console.

Create a new rule and provide a name and description.

For the Event source, select AWS events or EventBridge Schema.

In Event pattern, select AWS services and choose CloudTrail as the service.

Specify the event type as AWS API Call via CloudTrail.

In the Event source dropdown, select IAM and in the API operation, enter CreateUser.

Add Target:

Add a target and select SNS topic.

Choose the SNS topic you created earlier (IAMCreateUserNotifications).

Configure Permissions:

Ensure that the EventBridge rule has permission to publish to the SNS topic.

This configuration will trigger an email notification whenever an IAM CreateUser API call is made, keeping you informed of new user creations.

References:

Creating an EventBridge Rule That Triggers on an Event

Setting Up a CloudWatch Event to Trigger SNS

Creating CloudTrail Event Rules

When a portfolio is shared between AWS accounts in AWS Service Catalog, the administrator of the second account can import the shared portfolio and add products from the imported portfolio to their local portfolio. However, they cannot modify the imported portfolio directly.

Import the Shared Portfolio:

In the second AWS account, open the AWS Service Catalog console at AWS Service Catalog Console.

Navigate to Portfolios and choose Import portfolio.

Add Products to a Local Portfolio:

Once the portfolio is imported, the administrator can select products from the imported portfolio and add them to a local portfolio for easier management and deployment.

References:

Sharing Portfolios Across Accounts

AWS Service Catalog Admin Guide

AWS Compute Optimizer recommends optimal AWS resources for your workloads to reduce costs and improve performance. It provides actionable recommendations to help you choose the right EC2 instances and AWS Lambda configurations.

Access AWS Compute Optimizer:

Open the AWS Compute Optimizer console at AWS Compute Optimizer Console.

Review the recommendations for your EC2 instances and AWS Lambda functions.

Implement Recommendations:

Analyze the recommendations, which might include resizing instances, changing instance types, or modifying Lambda memory settings.

Apply the recommendations to optimize your resources and reduce costs.

References:

AWS Compute Optimizer

Getting Started with AWS Compute Optimizer