A legacy, on-premises web application cannot be load balances effectively. There are both planned and unplanned events that cause usage spikes to millions of concurrent users. The existing infrastructure cannot handle the usage spikes. The CIO has mandated that the application be moved to the cloud to avoid further disruptions, with the additional requirement that source IP addresses be unaltered to support network traffic-monitoring needs. Which of the following designs will meet these requirements?
A real estate company is building an internal application so that real estate agents can upload photos and
videos of various properties. The application will store these photos and videos in an Amazon S3 bucket as
objects and will use Amazon DynamoDB to store corresponding metadata. The S3 bucket will be configured
to publish all PUT events for new object uploads to an Amazon Simple Queue Service (Amazon SQS) queue.
A compute cluster of Amazon EC2 instances will poll the SQS queue to find out about newly uploaded
objects. The cluster will retrieve new objects, perform proprietary image and video recognition and
classification update metadata in DynamoDB and replace the objects with new watermarked objects. The
company does not want public IP addresses on the EC2 instances.
Which networking design solution will meet these requirements MOST cost-effectively as application usage
increases?
A Network Engineer needs to create a public virtual interface on the company's AWS Direct Connect connection and only import routes which originated from the same region as the Direct Connect location.
A global delivery company is modernizing its fleet management system. The company has several business
units. Each business unit designs and maintains applications that are hosted in its own AWS account in
separate application VPCs in the same AWS Region. Each business unit's applications are designed to get data
from a central shared services VPC.
The company wants the network connectivity architecture to provide granular security controls. The
architecture also must be able to scale as more business units consume data from the central shared services
VPC in the future.
Which solution will meet these requirements in the MOST secure manner?
A company has an application running on Amazon EC2 instances in a VPC The application must publish custom metrics to Amazon CloudWatch in the same AWS Region The metrics include proprietary information All connectivity must be over private IP addresses.