A.

The user can use the copy URL functionality of CloudWatch to share the exact details

Amazon CloudWatch provides the functionality to graph the metric data generated either by
the AWS services or the custom metric to make it easier for the user to analyse. The
console provides the option to save the URL or bookmark it so that it can be used in the
future by typing the same URL. The Copy URL functionality is available under the console
when the user selects any metric to view.

B.

The user has to supply the timezone with each data point

A.

Destination: 0.0.0.0/0 and Target: i-a12345

A user can create a subnet with VPC and launch instances inside that subnet. If the user
has created a public private subnet, the instances in the public subnet can receive inbound
traffic directly from the Internet, whereas the instances in the private subnet cannot. If these
subnets are created with Wizard, AWS will create two route tables and attach to the
subnets. The main route table will have the entry “Destination: 0.0.0.0/0 and Target:
ia12345”, which allows all the instances in the private subnet to connect to the internet
using NAT.

A.

The user should attach an IAM role with DynamoDB access to the EC2 instance

With AWS IAM a user is creating an application which runs on an EC2 instance and makes
requests to AWS, such as DynamoDB or S3 calls. Here it is recommended that the user
should not create an IAM user and pass the user's credentials to the application or embed
those credentials inside the application. Instead, the user should use roles for EC2 and
give that role access to DynamoDB /S3. When the roles are attached to EC2, it will give
temporary security credentials to the application hosted on that EC2, to connect with
DynamoDB / S3.

C.

5

D.

Keep rotating the encryption key manually at the client side

AWS S3 supports client side or server side encryption to encrypt all data at Rest. The
server side encryption can either have the S3 supplied AES-256 encryption key or the user
can send the key along with each API call to supply his own encryption key (SSE-C.. Since
S3 does not store the encryption keys in SSE-C, it is recommended that the user should
manage keys securely and keep rotating them regularly at the client side version.

D.

Resources

AWS Cloud formation is an application management tool which provides application
modelling, deployment, configuration, management and related activities. The template is a
JSON-format, text-based file that describes all the AWS resources required to deploy and
run an application. It can have option fields, such as Template Parameters, Output, Data
tables, and Template file format version. The only mandatory value is Resource. The user
can define the AWS services which will be used/ created by this template inside the
Resource section

C.

Set up CloudWatch billing alerts for all AWS resources used by each project, with a
notification occurring when the amount for each resource tagged to a particular project
matches the budget allocated to the project.