Question 180
A professional architect is reviewing two independent workstreams. Requirement A: A Lambda-backed API team wants to expose only ten percent of traffic to a new function revision before promoting it. Requirement B: A noncritical archive service has a 24-hour RTO and may restore its configuration and data from protected backups. Choose TWO actions that directly address these separate problems.
Explanation
Correct Answers
This action meets the independently stated requirement A: A Lambda-backed API team wants to expose only ten percent of traffic to a new function revision before promoting it. Lambda aliases support weighted traffic between published versions with monitored promotion. A direct acceptance check is: The alias sends the intended approximate percentage to the canary version and reverts after a simulated alarm.
This action meets the independently stated requirement B: A noncritical archive service has a 24-hour RTO and may restore its configuration and data from protected backups. Backup-and-restore DR suits longer RTO targets when restore execution is practiced. A direct acceptance check is: A restore drill meets the 24-hour recovery target with verified data integrity and access.
Incorrect Answers
This action targets a different technical need: A read-heavy reporting application needs an up-to-date secondary regional database copy that can be promoted in a disaster. It does not replace either required solution in A or B. Cross-Region read replicas are asynchronous and may require explicit promotion in recovery; verify the two stated requirements independently rather than accepting an unrelated change.
This action targets a different technical need: A platform team deploys the same baseline IAM roles and configuration stacks into 70 governed member accounts. It does not replace either required solution in A or B. CloudFormation StackSets manages stack instances across accounts and Regions from a controlled template; verify the two stated requirements independently rather than accepting an unrelated change.
This action targets a different technical need: A central security team needs automated detections for unusual cross-account API activity and suspected credential misuse. It does not replace either required solution in A or B. GuardDuty consumes AWS data sources to identify suspicious behavior and report findings; verify the two stated requirements independently rather than accepting an unrelated change.