AWS Solutions Architect Associate(SAA-C02)- Quiz 2

Q1.
A Solutions Architect is designing a solution for a financial application that will receive trading data in large volumes. What is the best solution for ingesting and processing a very large number of data streams in near real-time?

Kinesis Data Streams

EMR

Kinesis Firehose

RedShift

WHY A IS True?	CONCEPT: Kinesis Data Streams	Kinesis Data Streams enables you to build custom applications that process or analyze streaming data for specialized needs. It enables real-time processing of streaming big data and can be used for rapidly moving data off data producers and then continuously processing the data. Kinesis Data Streams stores data for later processing by applications (key difference with Firehose which delivers data directly to AWS services).
WHY B IS False?	CONCEPT: EMR	EMR is a hosted Hadoop framework that is used for analytics. It cost-effectively process vast amounts of data
WHY C IS False?	CONCEPT: Kinesis Firehose	Kinesis Firehose is used for loading real-time streaming data. Kinesis Firehose can allow the transformation of data and then delivers data to supported services.
WHY D IS False?	CONCEPT: RedShift	RedShift is a data warehouse solution used for analyzing data. It is used for online analytics processing (OLAP) workloads.
Short Trick	1." ingesting and processing a very large number of data streams in near real-time" - That's the main purpose of Kinesis Data Streams
References:	REFERNCED DOCS

Use an encrypted Amazon EC2 instance store and copy the data to another EC2 instance using a cron job and a batch script.

Use an encrypted Amazon EFS filesystem and use an Amazon CloudWatch Events rule to start a backup copy of data using AWS Lambda

Use an encrypted Amazon EBS volume and use Data Lifecycle Manager to automate snapshots

Use server-side encryption on an Amazon S3 bucket and use Cross-Region-Replication to backup on a schedule

WHY A IS False?	CONCEPT: Instance Store	EC2 instance stores are block storages, however, they are non-persistent volumes. And, the question demands persistent storage.
WHY B IS False?	CONCEPT: Amazon EFS	EFS is a file-level storage service, not block storage. However, the question clearly states block storage.
WHY C IS True?	CONCEPT: EBS volume & Data Lifecycle Manager.	For block storage, the Solutions Architect should use either Amazon EBS or EC2 instance store. In our question, persistent storage is required. Instance stores are non-persistent volumes, while Amazon EBS is persistent storage. So, using Amazon EBS is the right solution for us. Also, you can encrypt your volume and automate volume-level backups using snapshots that are run by Data Lifecycle Manager.
WHY D IS False?	CONCEPT: Amazon S3	Amazon S3 is an object-based storage system, not a block-based storage system.
Short Trick	BLOCK STORAGE- Out of all options, Amazon EBS & EC2 Instance stores are block storage. PERSISTENT- Out of the above two options, only Amazon EBS is persistent.
References:	REFERNCED DOCS

Use EC2 instances instead as you can assign different IAM roles on each instance

Create a separate Task Definition for the application container that uses a different Task Role

In the same Task Definition, specify a separate Task Role for the application container

You cannot implement granular permissions with ECS containers.

WHY A IS False?	CONCEPT: IAM roles & EC2 instances	You can apply different IAM roles to different EC2 instances, but to grant permissions to ECS application containers you must use Task Definitions and Task Roles.
WHY B IS True?	CONCEPT: Task Definition and Task Role	A Task Definition is required to run Docker containers in Amazon ECS and you can specify the IAM role (Task Role) that the task should use for permissions. With the EC2 launch type, you can apply for IAM roles at the container and task level. Whereas with Fargate you can only apply at the task level.
WHY C IS False?	CONCEPT: Task Definition and Task Role	A separate task definition should be created to avoid granting the permissions to other containers running on the cluster.
WHY D IS False?	CONCEPT: Task Definition and Task Role	You can implement granular permissions on ECS containers as IAM roles are granular and are applied through Task Definitions/Task Roles.
Short Trick	"Grant permission to individual container " and "without granting permission to other containers" indicates we have to use a separate task definition along with a separate task role.
References:	REFERNCED DOCS