SAA-C03 Exam Dumps : AWS Certified Solutions Architect - Associate (SAA-C03)

The ALB must be in a public subnet to receive internet traffic. The EC2 instances and the RDS database should be in private subnets to prevent direct internet access, minimizing the attack surface. This aligns with AWS security best practices for web application architectures.

Reference Extract:

" Internet-facing ALBs should be placed in public subnets; EC2 instances and RDS databases should be in private subnets to restrict direct internet access. "

Source: AWS Certified Solutions Architect – Official Study Guide, Network Security and Design section.

The optimal way to improve reliability and scalability of SFTP on AWS is to use AWS Transfer Family (for SFTP). It provides a fully managed SFTP server integrated with Amazon S3.

No EC2 instances or infrastructure management is required.

AWS Transfer Family supports custom DNS domains (e.g., sftp.example.com) and allows integration with existing authentication mechanisms like LDAP, AD, or custom identity providers.

Files are uploaded directly to S3, eliminating the need for cron jobs to move data from EC2 to S3.

Built-in high availability and scalability removes the burden of managing infrastructure.

Other options:

A and D still require manual scaling, server maintenance, and cron jobs.

C (Storage Gateway) is used for hybrid file access, not for replacing an SFTP server.

???? Reference:

AWS Transfer Family for SFTP

The data isfrequently accessed only for the first 30 daysand then israrely accessedbut must be retained for7 years. That pattern matchesAmazon S3 Standardfor the initial active period and thenS3 Glacier Deep Archivefor long-term retention at the lowest storage cost. AWS guidance positions Glacier Deep Archive for long-lived archive data that is accessed once or twice a year and is ideal for compliance-style retention. EFS and EBS are not cost-effective archival storage choices for this use case. S3 Standard-IA is cheaper than S3 Standard, but Glacier Deep Archive is more cost-optimized for multi-year rare access.

============