Amazon Web Services Updated SOA-C02 Exam Questions and Answers by michal

It's a best practice to use aws s3 commands (such as aws s3 cp) for multipart uploads and downloads, because these aws s3 commands automatically perform multipart uploading and downloading based on the file size. By comparison, aws s3api commands, such as aws s3api create-multipart-upload, should be used only when aws s3 commands don't support a specific upload need, such as when the multipart upload involves multiple servers, a multipart upload is manually stopped and resumed later, or when the aws s3 command doesn't support a required request parameter. https://aws.amazon.com/premiumsupport/knowledge-center/s3-multipart-upload-cli/

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html

To block traffic to the external IP address identified by Amazon GuardDuty, the SysOps administrator should create a network ACL and add an outbound deny rule for traffic to the external IP address.

Network ACL:

Network ACLs (Access Control Lists) are stateless and operate at the subnet level. They can allow or deny specific inbound and outbound traffic based on rules.

Steps to Implement:

Go to the VPC console and select the network ACL associated with the subnet containing the EC2 instance.

Add an outbound rule to deny traffic to the external IP address provided by GuardDuty.

Ensure the rule is properly placed in the rule number order to be evaluated correctly.

Network ACLs

GuardDuty Documentation

geolocation "Geolocation routing lets you choose the resources that serve your traffic based on the geographic location of your users, meaning the location that DNS queries originate from. For example, you might want all queries from Europe to be routed to an ELB load balancer in the Frankfurt region."

Could be confused with geoproximity - "Geoproximity routing lets Amazon Route 53 route traffic to your resources based on the geographic location of your users and your resources. You can also optionally choose to route more traffic or less to a given resource by specifying a value, known as a bias. A bias expands or shrinks the size of the geographic region from which traffic is routed to a resource" the use case is not needed as per question.

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

To direct users to the region that provides the fastest response times, transitioning to a latency routing policy in Amazon Route 53 is the best solution.

Latency-Based Routing:

Latency-based routing allows you to route your traffic to the AWS region that provides the lowest latency.

Implementation:

In each new region (us-east-1 and ap-south-1), create a new Elastic Load Balancer and a new set of EC2 instances to run a copy of the application.

Open the Route 53 console.

Select the hosted zone and choose "Create Record Set."

Create latency-based records pointing to the load balancers in each region.

Amazon Route 53 Latency-Based Routing