Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 532 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 532
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company has a workload in an AWS Region. Customers connect to and access the workload by using an Amazon API Gateway REST API. The company uses Amazon Route 53 as its DNS provider. The company wants to provide individual and secure URLs for all customers.

Which combination of steps will meet these requirements with the MOST operational efficiency? (Choose three.)

A. Register the required domain in a registrar. Create a wildcard custom domain name in a Route 53 hosted zone and record in the zone that points to the API Gateway endpoint.
B. Request a wildcard certificate that matches the domains in AWS Certificate Manager (ACM) in a different Region.
C. Create hosted zones for each customer as required in Route 53. Create zone records that point to the API Gateway endpoint.
D. Request a wildcard certificate that matches the custom domain name in AWS Certificate Manager (ACM) in the same Region.
E. Create multiple API endpoints for each customer in API Gateway.
F. Create a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM).

Show Suggested Answer

Suggested Answer: ADF 🗳️

by AncaZalog at June 7, 2023, 8:57 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

AshishRocks

Highly Voted 2 years, 1 month ago

Step A involves registering the required domain in a registrar and creating a wildcard custom domain name in a Route 53 hosted zone. This allows you to map individual and secure URLs for all customers to your API Gateway endpoints. Step D is to request a wildcard certificate from AWS Certificate Manager (ACM) that matches the custom domain name you created in Step A. This wildcard certificate will cover all subdomains and ensure secure HTTPS communication. Step F is to create a custom domain name in API Gateway for your REST API. This allows you to associate the custom domain name with your API Gateway endpoints and import the certificate from ACM for secure communication.

upvoted 9 times

...

Guru4Cloud

Highly Voted 1 year, 11 months ago

Selected Answer: ADF

The key points: Using a wildcard domain and certificate avoids managing individual domains/certs per customer. This is more efficient. The domain, hosted zone, and certificate should all be in the same region as the API Gateway REST API for simplicity. Creating multiple API endpoints per customer (Option E) adds complexity and is not required. Option B and C add unnecessary complexity by separating domains, certificates, and hosted zones.

upvoted 8 times

...

awsgeek75

Most Recent 1 year, 6 months ago

ADF looks right but not sure why C is wrong: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-api-gateway.html#routing-to-api-gateway-config

upvoted 3 times

LeonSauveterre

7 months, 1 week ago

My guess on why C is not ideal: Creating individual hosted zones for each customer is too much. It definitely increases operational overhead, while using a wildcard domain eliminates this need (which is more ideal).

upvoted 1 times

...

ukivanlamlpi

1 year, 11 months ago

Selected Answer: ADF

https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-custom-domains.html https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/AboutHZWorkingWith.html

upvoted 5 times

...

jaydesai8

2 years ago

Selected Answer: ADF

ADF - makes sense

upvoted 3 times

...

jkhan2405

2 years, 1 month ago

Selected Answer: ADF

It's ADF

upvoted 3 times

...

MAMADOUG

2 years, 1 month ago

For me AFD

upvoted 3 times

...

alexandercamachop

2 years, 1 month ago

Selected Answer: ADF

ADF - One to create the custom domain in Route 53 (Amazon DNS) Second to request wildcard certificate from ADM Thirds to import the certificate from ACM.

upvoted 3 times

...

AncaZalog

2 years, 1 month ago

is ADF

upvoted 2 times

...