SOA-C01 Exam Dumps : AWS Certified SysOps Administrator - Associate

Enable AWS Trusted Advisor and show the Security team that the Security Groups unrestricted access check will alarm.

Schedule an AWS Lambda function to run hourly to scan and evaluate all security groups, and send a report to the Security team.

Use AWS Config to enable the restricted-common-ports rule, and add port 80 to the parameters.

Use Amazon Inspector to evaluate the security groups during scans, and send the completed reports to the Security team.

Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings

Change the Viewer Protocol Policy to use HTTPS only

Configure the distribution to use presigned cookies and URLs to restrict access to the distribution

Enable automatic compression of objects in the Cache Behavior Settings

Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings.

Configure the Auto Scaling group to use lifecycle hooks. Deploy now instances with the new application version. Complete the lifecycle hook action once healthy.

Create a new Amazon Machine Image (AMI) containing the updated code. Create a launch configuration with the AMI. Update Auto Scaling group to use the new lauch configuration.

Deploy a second CloudFormation stack. Wait for the application to be available Cut over to the new Application Load Balancer

Modify the CloudFormation template to use an AutoScalingReplacingUpdate policy. Update the stack. Perform a second update with the new release