Q62 — AWS SAA-C03 Ch.15

Question 62 of 100 | ← Chapter 15

Q1162. A company wants to migrate an application to AWS. The application runs on Docker containers behind an Application Load Balancer(ALB). The application stores data in a PostgreSQL database.The cloud-based solution must use AWS WAF to inspect all application traffic. The application experiences most traffic on weekdays. There is significantly less traffic on weekends.Which solution will meet these requirements in the MOST cost-effective way?

Correct Answer: C. Create a web access control list(web ACL) in AWS WAF that includes the necessary rules. Attach the web ACL to the ALB. Run the application on Amazon Elastic Container Service (Amazon ECS). Use Amazon Aurora Serverless as the database.

Explanation

To meet the requirements of migrating the application to AWS with AWS WAF for traffic inspection, cost- effectiveness, and scalable container orchestration, the best solution is:Key Requirements:Migrate Docker containers (currently behind an ALB).Use AWS WAF to inspect all application traffic.Cost-effective solution (handles traffic spikes on weekdays and low traffic on weekends).PostgreSQL database (managed solution preferred).Option Analysis:A. Use a Network Load Balancer (NLB). Create a web access control list (web ACL) in AWS WAF that includes the necessary rules. Attach the web ACL to the NLB. Run the application on Amazon Elastic Container Service (Amazon ECS). Use Amazon RDS for PostgreSQL as the database. NLB is for low-latency, TCP/UDP traffic (not HTTP/HTTPS, which is better suited for ALB). AWS WAF can be attached to ALB, not NLB (NLB does not support WAF integration).Not the best fit (WAF integration is incorrect).B. Create a web access control list (web ACL) in AWS WAF that includes the necessary rules. Attach the web ACL to the ALB. Run the application on Amazon Elastic Kubernetes Service (Amazon EKS). Use Amazon RDS for PostgreSQL as the database.ALB + WAF is correct (WAF can inspect traffic).Amazon EKS is a managed Kubernetes service, but it is more expensive and complex than ECS for this use case.Amazon RDS for PostgreSQL is a managed database but does not auto-scale for traffic spikes (unlike Aurora Serverless).Not the most cost-effective (EKS is overkill, RDS does not auto-scale). C. Create a web access control list (web ACL) in AWS WAF that includes the necessary rules. Attach the web ACL to the ALB. Run the application on Amazon Elastic Container Service (Amazon ECS). Use Amazon Aurora Serverless as the database.ALB + WAF is correct (WAF inspects traffic).Amazon ECS is a fully managed container orchestration service (cost-effective). Amazon Aurora Serverless is a serverless, auto-scaling PostgreSQL database (cost-effective for variable traffic).Best fit for cost-effectiveness and scalability.D. Use a Network Load Balancer (NLB). Create a web access control list (web ACL) in AWS WAF that has the necessary rules. Attach the web ACL to the NLB. Run the application on Amazon Elastic Container Service (Amazon ECS). Use Amazon Aurora Serverless as the database. NLB does not support WAF integration (only ALB supports WAF).Incorrect setup (WAF cannot be attached to NLB).Correct Answer:C. Create a web access control list (web ACL) in AWS WAF that includes the necessary rules. Attach the web ACL to the ALB. Run the application on Amazon Elastic Container Service (Amazon ECS). Use Amazon Aurora Serverless as the database.This solution provides:ALB + WAF for traffic inspection.Amazon ECS (fully managed, cost-effective container orchestration). Amazon Aurora Serverless (auto-scaling PostgreSQL database, cost-effective for variable traffic). Most cost-effective (handles traffic spikes and low-traffic periods efficiently).Final Answer:C. Create a web access control list (web ACL) in AWS WAF that includes the necessary rules. Attach the web ACL to the ALB. Run the application on Amazon Elastic Container Service (Amazon ECS). Use Amazon Aurora Serverless as the database.The solution that will meet the requirements in the most cost-effective way is:C. Create a web access control list (web ACL) in AWS WAF that includes the necessary rules. Attach the web ACL to the ALB. Run the application on Amazon Elastic Container Service (Amazon ECS). Use Amazon Aurora Serverless as the database.AWS WAF with ALB: Attaching the web ACL to the Application Load Balancer allows for inspection and filtering of incoming application traffic, which is essential for security. Amazon ECS: Using Amazon Elastic Container Service provides a managed environment for running Docker containers, which is suitable for applications that require flexibility and scalability. Amazon Aurora Serverless: This option automatically adjusts capacity based on demand and is cost- effective for applications with variable traffic patterns, such as those that experience high traffic on weekdays and lower traffic on weekends.This combination effectively meets the requirements for security, cost efficiency, and scalability.