Authentic Amazon Web Services Certification Exam SOA-C02 Questions Answers

"A certificate is eligible for automatic renewal subject to the following considerations: ELIGIBLE if associated with another AWS service, such as Elastic Load Balancing or CloudFront. ELIGIBLE if exported since being issued or last renewed. ELIGIBLE if it is a private certificate issued by calling the ACM RequestCertificate API and then exported or associated with another AWS service. ELIGIBLE if it is a private certificate issued through the management console and then exported or associated with another AWS service." https://docs.aws.amazon.com/acm/latest/userguide/managed-renewal.html

To achieve a limited rollout of the new website to 20% of the company's customers using Amazon Route 53, a weighted routing policy is the most appropriate solution.

Weighted Routing Policy:

Weighted routing lets you associate multiple resources with a single domain name and choose how much traffic is routed to each resource.

Configuration:

Open the Route 53 console.

Select the hosted zone and choose "Create Record Set."

Create two records for your domain:

One record for the original resource with a weight of 80.

Another record for the new resource with a weight of 20.

References:

Amazon Route 53 Weighted Routing

To ensure that EC2 instances in private subnets can access the internet for software updates while complying with the security policy that requires instances to be in private subnets, you should use a NAT gateway. A NAT gateway allows instances in private subnets to initiate outbound traffic to the internet but prevents the internet from initiating connections to those instances.

Steps:

Create a NAT Gateway:

Open the Amazon VPC console.

In the navigation pane, choose "NAT Gateways".

Choose "Create NAT Gateway".

Select the public subnet where you want to create the NAT gateway.

Choose an Elastic IP address for the NAT gateway.

Choose "Create a NAT Gateway".

Update the Route Table for Private Subnets:

Open the Amazon VPC console.

In the navigation pane, choose "Route Tables".

Select the route table associated with your private subnets.

Choose the "Routes" tab and then "Edit routes".

Add a route with the destination 0.0.0.0/0 and the target as the NAT gateway ID.

Save the changes.

This setup ensures that instances in private subnets can access the internet via the NAT gateway in the public subnet.

References:

AWS NAT Gateway Documentation

VPC Route Tables