Q71 — AWS SAA-C03 Ch.15

Question 71 of 100 | ← Chapter 15

Q1171. A company runs a workload in an AWS Region. Users connect to the workload by using an Amazon API Gateway REST API.The company uses Amazon Route 53 as its DNS provider and has created a Route 53 Hosted Zone. The company wants to provide unique and secure URLs for all workload users.Which combination of steps will meet these requirements with the MOST operational efficiency?(Select THREE.)

• A. Create a wildcard custom domain name in the Route 53 hosted zone as an alias for the API Gateway endpoint. ✓
• B. Use AWS Certificate Manager (ACM) to request a wildcard certificate that matches the custom domain in a second Region.
• C. Create a hosted zone for each user in Route 53. Create zone records that point to the APl Gateway endpoint.
• D. Use AWS Certificate Manager (ACM) to request a wildcard certificate that matches the custom domain name in the same Region. ✓
• E. Use API Gateway to create multiple API endpoints for each user.
• F. Create a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM). ✓

Correct Answer: A. Create a wildcard custom domain name in the Route 53 hosted zone as an alias for the API Gateway endpoint., D. Use AWS Certificate Manager (ACM) to request a wildcard certificate that matches the custom domain name in the same Region., F. Create a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM).

Explanation

To provide unique and secure URLs for all workload users with the most operational efficiency, the best combination of steps is:A. Create a wildcard custom domain name in the Route 53 hosted zone as an alias for the API Gateway endpoint.D. Use AWS Certificate Manager (ACM) to request a wildcard certificate that matches the custom domain name in the same Region.F. Create a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM).### Explanation:\1. A: Creating a wildcard custom domain name in Route 53 allows you to handle multiple subdomains efficiently, directing them to the API Gateway endpoint without needing to create individual records for each user.\2. D: Requesting a wildcard certificate in the same region with ACM ensures that all subdomains under the wildcard can be secured with HTTPS, which is essential for secure communication.\3. F: Creating a custom domain name in API Gateway and importing the ACM certificate allows you to serve the API securely under the wildcard domain, making it easy for users to connect using unique URLs.### Other Options:B: Requesting a wildcard certificate in a second Region is unnecessary and complicates the setup if the workload and API are in a single region.C: Creating a hosted zone for each user is impractical and adds significant management overhead, which is contrary to the goal of operational efficiency.E: Creating multiple API endpoints for each user would lead to increased complexity and operational overhead without providing the necessary benefits.Thus, options A, D, and F provide an efficient and scalable solution to meet the requirements.