Exam AWS Certified Solutions Architect - Professional topic 1 question 824 discussion

The dumbest a the worst worded question I've ever read throughout four exams I've passed so far. But anyway. the LEAST operation = Serverless. So it's Lambda, CloudFront and ACM, hence CEF

Sure about B and C. Guess E is the 3rd option.

Lambda would need a change every time config file changes and would increase effort, hence this is not an efficient option BEF

the requirement is this: A solutions architect must implement a redirect service that accepts HTTP and HTTPS requests. if it's a service, then API gateway is the way to go. how does cloudfront implement a redirect service? what is the origin of the cloudfront?

A. Using a dynamic webpage on EC2 seems to be the only option explicitly indicating it can directly store and process JSON files. B. ALB itself does not store or directly handle JSON files. C. Lambda can process, but it's not clear from where it reads the JSON. D. API Gateway is primarily for exposing Lambda, not for processing JSON. E. CloudFront and Lambda@Edge both don't mention how to store or retrieve JSON. F. The SSL certificate is for supporting HTTPS. Therefore, considering the need to handle the JSON file, option A (EC2) appears to be the appropriate choice. To support HTTP and HTTPS requests, option B (ALB) and option F (SSL certificate from ACM) are also necessary. So, from this perspective, the best three choices seem to be A, B, and F.

E: Amazon S3 static web hosting supports only the HTTP protocol. You must use a CloudFront distribution for redirection from HTTP to HTTPS. F:You can't associate more than one SSL or Transport Layer Security (TLS) certificate to an individual CloudFront distribution. However, certificates provided by AWS Certificate Manager (ACM) support up to 10 subject alternative names, including wildcards. To turn on SSL or HTTPS for multiple domains served through one CloudFront distribution, assign a certificate from ACM that includes all the required domains.

The question requires customer communicates with 10 domains with https, you should have 10 certificates each for one domain. But CloudFront distribution ONLY support ONE certificate, see the link https://repost.aws/de/knowledge-center/associate-ssl-certificates-cloudfront So here CloudFront is out. Both ALB and API Gateway can support multiple certificates, so I choose API gateway. The correct answer should be C,D,F

You need SSL cert so F and you need to put it somewhere so B. Then you have to get the URL from JSON so C.

Correct BEF

BCE for me too.

okay going CEF -- it addresses the full question. Cloudfront + Lambda, we need https so cert manager, then I chose C over B, because the cert will be attached to the Cloudfront not an alb, and it addresses the JSON doc. Final answer CEF

definitely E & F , not sure then between B & C

BCE F is to confuse people.

B and F, no discussion here , load and cert. I choose B , because you can use lambda@edge to get the redirections directly from a json file as the question states. Example: https://aws.amazon.com/es/blogs/networking-and-content-delivery/handling-redirectsedge-part2/

E: (just as third option is needed) https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html B F: (Load balancer + cert) https://aws.amazon.com/premiumsupport/knowledge-center/elb-redirect-to-another-domain-with-alb/

BCF F is for the HTTPS listner that need at least one certificate. A, E are unuseful

Must be CEF, like bobsmith2000 comments: - C. Create Lambda first - D. Create Cloudfront distribution, CloudFront trigger to run the function (Lambda function above) - E. use ACM to add SSL into Cloudfront distribution for https support. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-edge-how-it-works-tutorial.html