SOA-C02 Dumps Questions With Valid Answers

Deny Post. Put. and Delete on the bucket.

Enable server-side encryption on the bucket.

Enable Amazon S3 versioning on the bucket.

Enable snapshots on the bucket.

Add a NAT gateway to a public subnet.

Attach a private address to the elastic network interface on the EC2 instance.

Attach an Elastic IP address to the internet gateway.

Add an entry to the route table for the subnet that points to an internet gateway.

Create an internet gateway and attach it to a VPC.

Specify "' as the principal and PrincipalOrgld as a condition.

Specify all account numbers as the principal.

Specify PrincipalOrgld as the principal.

Specify the organization's management account as the principal.

Configure an identity-based access policy on Amazon ES. Add an allow statement to the
policy that includes the Amazon Resource Name (ARN) for each branch office VPN
connection.

Configure an IP-based domain access policy on Amazon ES. Add an allow statement to
the policy that includes the private IP CIDR blocks from each branch office network.

Deploy a new Amazon ES domain in private subnets in a VPC, and import a snapshot
from the old domain. Create a security group that allows inbound traffic from the branch
office CIDR blocks.

Reconfigure the Amazon ES domain in private subnets in a VPC. Create a security group

Store the database password as an environment variable for each Lambda function. Create a new Lambda function that is named
PasswordRotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate function every 30 days to change the database password and update the environment variable for each Lambda function.

Use AWS Key Management Service (AWS KMS) to encrypt the database password and to store the encrypted password as an environment
variable for each Lambda function. Grant each Lambda function access to the KMS key so that the database password can be decrypted when required. Create a new Lambda function that is named PasswordRotate to change the password every 30 days. 

Use AWS Secrets Manager to store credentials for the database. Create a Secrets Manager secret, and select the database so that Secrets Manager will use a Lambda function to update the database password automatically. Specify an automatic rotation schedule of 30 days. Update each Lambda function to access the database password from
SecretsManager.

Use AWS Systems Manager Parameter Store to create a secure string to store credentials for the database. Create a new Lambda function called PasswordRotate. Use
Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate
function every 30 days to change the database password and to update the secret within
Parameter Store. Update each Lambda function to access the database password from
Parameter Store.