AWS Certified Solutions Architect – Associate (SAA-C03) — Question 585
A company is designing a solution to capture customer activity in different web applications to process analytics and make predictions. Customer activity in the web applications is unpredictable and can increase suddenly. The company requires a solution that integrates with other web applications. The solution must include an authorization step for security purposes.
Which solution will meet these requirements?
Answer options
- A. Configure a Gateway Load Balancer (GWLB) in front of an Amazon Elastic Container Service (Amazon ECS) container instance that stores the information that the company receives in an Amazon Elastic File System (Amazon EFS) file system. Authorization is resolved at the GWLB.
- B. Configure an Amazon API Gateway endpoint in front of an Amazon Kinesis data stream that stores the information that the company receives in an Amazon S3 bucket. Use an AWS Lambda function to resolve authorization.
- C. Configure an Amazon API Gateway endpoint in front of an Amazon Kinesis Data Firehose that stores the information that the company receives in an Amazon S3 bucket. Use an API Gateway Lambda authorizer to resolve authorization.
- D. Configure a Gateway Load Balancer (GWLB) in front of an Amazon Elastic Container Service (Amazon ECS) container instance that stores the information that the company receives on an Amazon Elastic File System (Amazon EFS) file system. Use an AWS Lambda function to resolve authorization.
Correct answer: C
Explanation
Amazon API Gateway handles unpredictable spikes in traffic automatically and integrates seamlessly with web applications using an API Gateway Lambda authorizer for security. Amazon Kinesis Data Firehose is the most efficient serverless service for streaming data directly into an Amazon S3 bucket for analytics without managing Kinesis Data Streams shards. Gateway Load Balancer (GWLB) is intended for third-party network appliances and is not suitable for this application ingestion use case.