Free CLF-C02 Practice Test Questions and Answers (2026)

Elasticity is a core concept of cloud computing that refers to the ability to dynamically scale computing resources up or down to match workload demands. The question's description of acquiring resources when needed (scaling out/up) and releasing them when no longer needed (scaling in/down) is the precise definition of elasticity. This allows organizations to avoid over-provisioning for peak loads or under-provisioning during unexpected surges, ensuring they pay only for the capacity they actually use.

A. Economies of scale: This refers to the cost savings AWS achieves through its massive scale, which results in lower pay-as-you-go prices for customers.
C. Agility: This is the ability to innovate and deploy new applications and services rapidly, a benefit enabled by the cloud but distinct from elasticity.
D. Security: This pertains to the protection of data, identities, and infrastructure, which is a fundamental benefit but unrelated to dynamic resource allocation.

1. AWS Documentation, "What is Cloud Computing?": Under the section "Benefits of cloud computing," it defines Elasticity: "With cloud computing, you don’t have to over-provision resources up front to handle peak levels of business activity in the future. Instead, you provision the amount of resources that you actually need. You can scale these resources up or down to instantly grow and shrink capacity as your business needs change."

2. AWS Whitepaper, "AWS Well-Architected Framework" (July 2023): The Performance Efficiency Pillar section discusses rightsizing and elasticity. It states, "Elasticity is the ability to acquire resources as you need them and release resources when you no longer need them." (Page 39).

3. Carnegie Mellon University, "Cloud Computing Courseware": In defining cloud characteristics, elasticity is described as the capability to "scale up and scale down... resources dynamically" based on demand, which directly aligns with the question. (Referenced in various cloud computing syllabi and lecture notes on fundamental cloud properties).

VPC peering provides a direct, one-to-one network connection between two VPCs. This allows resources in either VPC to communicate with each other using private IP addresses as if they are on the same network. It is a non-transitive, point-to-point connection. AWS Transit Gateway acts as a network transit hub, or a "cloud router," that you can use to interconnect multiple VPCs and on-premises networks. By attaching VPCs to a single Transit Gateway, you enable communication between them through a central hub-and-spoke model, simplifying network architecture and management.

A. VPC endpoints enable private connections from a VPC to supported AWS services or endpoint services, not to another VPC.
B. Amazon Route 53 is a Domain Name System (DNS) service; it resolves domain names to IP addresses but does not create network connections.
D. AWS Direct Connect establishes a dedicated private network connection from an on-premises environment to AWS, not between two AWS VPCs.

1. AWS Documentation

Amazon VPC User Guide: "What is VPC peering?" - This section states

"A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses."

2. AWS Documentation

AWS Transit Gateway User Guide: "What is a transit gateway?" - This document explains

"An AWS Transit Gateway is a network transit hub that you can use to interconnect your virtual private clouds (VPCs) and on-premises networks."

3. AWS Documentation

Amazon VPC User Guide: "VPC endpoints" - The introduction clarifies

"A VPC endpoint enables you to privately connect your VPC to supported AWS services and VPC endpoint services powered by AWS PrivateLink..."

4. AWS Documentation

AWS Direct Connect User Guide: "What is AWS Direct Connect?" - The guide states

"AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS."

Migrating a commercial relational database (like Oracle or SQL Server) to an open-source database (like PostgreSQL or MySQL) on AWS is a heterogeneous migration. This process involves two primary steps. First, the database schema, including tables, views, and stored procedures, must be converted from the source engine's format to the target engine's format. The AWS Schema Conversion Tool (SCT) is designed specifically for this purpose. Second, the data itself must be moved from the source to the target database. AWS Database Migration Service (DMS) is the managed service that facilitates the secure and efficient migration of the data, often with minimal downtime.

B. AWS software development kits (SDKs) are libraries for application development to interact with AWS services, not a dedicated tool for database migration.
D. AWS Systems Manager is an operational management service for infrastructure configuration and automation, not for migrating database schemas or data.
E. Amazon EMR is a managed big data platform for processing large datasets using frameworks like Spark and Hadoop, not for relational database migration.

1. AWS Database Migration Service User Guide: In the section "What is AWS Database Migration Service?", it states, "For heterogeneous migrations, you can use the AWS Schema Conversion Tool (AWS SCT) to migrate your schema. Then, you can use AWS DMS to migrate your data." This directly confirms the combined use of both services for the described task.

2. AWS Schema Conversion Tool User Guide: The "What is the AWS Schema Conversion Tool?" section explains, "You can use the AWS SCT to convert your existing database schema from one database engine to another... After you convert your schema, you can use AWS DMS to migrate your data from your source database to your target database." This highlights the distinct roles of SCT for schema conversion and DMS for data migration.

3. AWS Whitepaper: A Practitioner’s Guide to Migrating Databases to AWS (Page 10): The section "AWS Schema Conversion Tool and AWS Database Migration Service" details the process: "For heterogeneous database migrations, you can use the AWS Schema Conversion Tool (AWS SCT) together with AWS DMS. AWS SCT converts your source database schemas and code objects to a format compatible with your target database. Then, you use AWS DMS to migrate the data."

According to the AWS Shared Responsibility Model, AWS is responsible for the security of the cloud, while the customer is responsible for security in the cloud. The customer's responsibilities include managing their data and controlling who can access that data. Performing client-side data encryption is a method of protecting customer data before it is sent to AWS, which falls squarely under the customer's data management duties. Similarly, configuring AWS Identity and Access Management (IAM) credentials and policies is a fundamental customer task for controlling access to their AWS resources and data. Both are core components of security in the cloud.

A. Establishing and securing the global infrastructure, including Regions and Availability Zones, is a core responsibility of AWS as part of managing the security of the cloud.
D. Securing edge locations is part of maintaining the AWS global network infrastructure, which is an AWS responsibility, not the customer's.
E. For managed services like Amazon RDS, AWS is responsible for patching the database engine and underlying operating system. This is part of the "security of the cloud."

1. AWS Shared Responsibility Model Documentation: AWS clearly delineates responsibilities. The customer is responsible for "Customer Data" and "Identity and Access Management." AWS is responsible for the "Global Infrastructure

" which includes "Regions

" "Availability Zones

" and "Edge Locations."

Source: AWS Compliance

"Shared Responsibility Model

" https://aws.amazon.com/compliance/shared-responsibility-model/. (Refer to the responsibility chart under "Differentiating AWS and Customer Responsibilities").

2. AWS Well-Architected Framework - Security Pillar: This document reinforces the model

stating

"The customer is responsible for the security of their data in the cloud... This includes identity and access management... and protecting data in transit and at rest

which can involve encryption."

Source: AWS Well-Architected Documentation

"Security Pillar

" Section: "Shared Responsibility Model

" https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/shared-responsibility-model.html.

3. Amazon RDS FAQs: The official documentation for Amazon RDS confirms that AWS manages patching for the service. The FAQ states

"Amazon RDS will make sure that the relational database software powering your deployment stays up-to-date with the latest patches."

Source: Amazon RDS

"FAQs

" Section: "Maintenance & Security

" https://aws.amazon.com/rds/faqs/.

An Amazon Machine Image (AMI) is a master image used for creating virtual servers, known as Amazon EC2 instances. An AMI serves as a template that includes the operating system, an application server, and applications. It provides all the necessary information to launch an instance. By creating a custom AMI, organizations can pre-package their required software, configurations, and security hardening requirements, ensuring that every instance launched from that AMI is consistent and compliant. This directly aligns with the description of a deployable, prepackaged instance template.

A. An Amazon EBS volume is a block-level storage device, similar to a virtual hard drive, that attaches to an EC2 instance; it is not an instance template.
B. An AWS CloudFormation template is an infrastructure-as-code file that defines a collection of AWS resources, not just a single prepackaged EC2 instance image.
C. An Amazon EBS snapshot is a point-in-time backup of an EBS volume. While snapshots are used to create AMIs, a snapshot itself is not the complete instance template.

1. AWS Documentation, EC2 User Guide for Linux Instances, "Amazon Machine Images (AMI)" section. It states, "An Amazon Machine Image (AMI) is a supported and maintained image provided by AWS that provides the information required to launch an instance... An AMI includes the following: A template for the root volume for the instance (for example, an operating system, an application server, and applications)."

2. AWS Documentation, EC2 User Guide for Linux Instances, "Amazon EBS volumes" section. It defines an EBS volume as, "a durable, block-level storage device that you can attach to a single EC2 instance."

3. AWS Documentation, CloudFormation User Guide, "What is AWS CloudFormation?" section. It describes CloudFormation as a service to "model and set up your Amazon Web Services resources... You create a template that describes all the AWS resources that you want." This highlights its role in orchestrating multiple resources, not being the instance image itself.

4. AWS Documentation, EC2 User Guide for Linux Instances, "Amazon EBS snapshots" section. This page explains, "You can back up the data on your Amazon EBS volumes to Amazon S3 by taking point-in-time snapshots." This clarifies its function as a backup mechanism.

AWS Budgets is the service specifically designed for cost management and control. It allows users to set custom budgets for their AWS costs and usage. You can define a specific monetary amount as a monthly spending limit. The service integrates with Amazon Simple Notification Service (SNS) and email to send alerts when actual or forecasted spending exceeds the configured budget thresholds. This directly addresses both of the company's requirements: setting a spending limit and receiving alerts when that limit is reached.

A. Cost Explorer is a tool for visualizing, understanding, and analyzing your AWS cost and usage data over time, not for setting spending limits or alerts.
B. AWS Trusted Advisor provides recommendations to optimize your AWS environment across cost, performance, and security, but it does not set or enforce spending budgets.
C. Service Quotas is used to view and manage the limits on the number of AWS resources you can run in your account, not the monetary cost of those resources.

1. AWS Billing and Cost Management User Guide: "Managing your costs with AWS Budgets." The documentation states

"You can use AWS Budgets to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount." This directly confirms the service's purpose aligns with the question's requirements.

2. AWS Cost Management User Guide: "Analyzing your costs with AWS Cost Explorer." This guide describes Cost Explorer as "a tool that enables you to view and analyze your costs and usage

" highlighting its function as an analytical tool rather than a budget-setting and alerting mechanism.

3. AWS Trusted Advisor User Guide: "Getting started with AWS Trusted Advisor." The guide explains

"AWS Trusted Advisor is an online tool that provides you real-time guidance to help you provision your resources following AWS best practices

" confirming its role as an advisory service.

4. Cornell University

Cloudify: "AWS Cost Management Tools." This university resource page explains

"AWS Budgets allows you to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount." This corroborates the function of AWS Budgets in an academic context.

5. Service Quotas User Guide: "What Is Service Quotas?" The documentation states

"Service Quotas is an AWS service that helps you manage your quotas for many AWS services from a central location

" clarifying its focus on resource quantity limits

not monetary spending.

The Security pillar of the AWS Well-Architected Framework explicitly incorporates the AWS Shared Responsibility Model as a foundational concept. This pillar focuses on protecting information and systems. The shared responsibility model is crucial because it defines which security controls are managed by AWS (security of the cloud) and which are managed by the customer (security in the cloud). Understanding this division is a core design principle for implementing appropriate security measures and building secure applications on AWS. The other pillars, while related to overall architecture, do not have the shared responsibility model as their central tenet.

A. Operational excellence focuses on running and monitoring systems to deliver business value and continuously improving processes, not the fundamental division of security responsibilities.
B. Performance efficiency focuses on the efficient use of computing resources to meet requirements, which is distinct from the allocation of security duties.
C. Reliability concerns the ability of a workload to recover from failures and meet demand, which is different from the shared security model.

1. AWS Well-Architected Framework Documentation, Security Pillar. The official documentation states, "The AWS shared responsibility model applies to the security pillar." It is listed as a foundational concept upon which the pillar's design principles are based. (Source: AWS Well-Architected Framework, Security Pillar, "Introduction" section, Paragraph 2).

2. AWS Well-Architected Framework Whitepaper (PDF). In the "Security" section, the whitepaper introduces the pillar by stating, "The security of your workload is the result of a partnership between you and AWS. The AWS shared responsibility model defines what you and AWS are responsible for." (Source: AWS Well-Architected Framework Whitepaper, Page 31, "Security" section).

3. AWS Shared Responsibility Model Documentation. This page details the responsibilities of AWS and the customer, which are the core concerns addressed within the Well-Architected Security Pillar. (Source: AWS Shared Responsibility Model, "Shared Responsibility Model" diagram and accompanying text).

Amazon SageMaker is a fully managed service designed to cover the entire machine learning (ML) workflow. It provides an integrated development environment (IDE) and a broad set of tools that enable developers and data scientists to prepare data and to build, train, and deploy high-quality ML models quickly. SageMaker removes the heavy lifting from each step of the ML process, making it easier to develop models. The other options are specialized AI services that use ML for specific tasks, rather than providing a platform to build custom models.

A. Amazon Personalize is a managed service for creating real-time personalized recommendations, not a general platform for building, training, and deploying various ML models.
B. Amazon Comprehend is a natural language processing (NLP) service for text analysis. It is not a comprehensive platform for the end-to-end ML model lifecycle.
C. Amazon Forecast is a managed service specifically for creating time-series forecasts. It does not provide the general capability to build and train any type of ML model.

1. Amazon SageMaker Developer Guide: In the "What Is Amazon SageMaker?" section, the documentation states, "Amazon SageMaker is a fully managed service that provides every developer and data scientist with the ability to build, train, and deploy machine learning (ML) models quickly." This directly aligns with the question's requirement.

2. AWS Machine Learning Services Overview: The official AWS documentation categorizes its ML offerings. Amazon SageMaker is positioned as the core platform service for ML, while services like Amazon Personalize, Amazon Comprehend, and Amazon Forecast are listed under "AI services," which are pre-trained for specific business problems. (See the "AI services" and "ML services" sections on the main AWS Machine Learning page).

3. Amazon Personalize Developer Guide: The "What Is Amazon Personalize?" section states, "Amazon Personalize is a fully managed machine learning service that uses your data to generate item recommendations for your users." This confirms its specialized purpose.

4. Amazon Comprehend Developer Guide: The "What is Amazon Comprehend?" section describes it as "a natural-language processing (NLP) service that uses machine learning to uncover information in unstructured data," highlighting its specific NLP focus.

The company's requirements are to discover, transform, and visualize data. AWS Glue is a serverless data integration service that is ideal for data discovery and transformation. It can crawl data sources to automatically populate the AWS Glue Data Catalog with metadata (discovery) and can be used to create, run, and monitor Extract, Transform, and Load (ETL) jobs to prepare data for analytics (transformation). Amazon QuickSight is a scalable, serverless, business intelligence (BI) service. Its primary function is to create and publish interactive dashboards and perform ad-hoc data analysis, directly fulfilling the requirement to visualize the data.

B. Amazon Elastic File System (Amazon EFS): This is a file storage service for Amazon EC2 instances. It does not have features for data discovery, transformation, or visualization.
C. Amazon Redshift: This is a data warehousing service used for large-scale data analysis and querying. While it can perform some transformations, it is not a visualization tool.
E. Amazon Quantum Ledger Database (Amazon QLDB): This is a specialized, fully managed ledger database. It is not designed for general-purpose data discovery, transformation, or visualization.

1. AWS Glue Documentation: "AWS Glue is a serverless data integration service that makes it easy to discover

prepare

and combine data for analytics

machine learning

and application development. AWS Glue provides all of the capabilities needed for data integration...". This covers the "discover" and "transform" requirements.

Source: AWS Glue Developer Guide

"What is AWS Glue?"

Section: "AWS Glue concepts".

2. Amazon QuickSight Documentation: "Amazon QuickSight is a cloud-scale business intelligence (BI) service that you can use to deliver easy-to-understand insights... Amazon QuickSight lets you create and publish interactive BI dashboards that include machine learning-powered insights." This covers the "visualize" requirement.

Source: Amazon QuickSight User Guide

"What is Amazon QuickSight?".

3. Amazon Redshift Documentation: "Amazon Redshift is a fully managed

petabyte-scale data warehouse service in the cloud." Its primary purpose is data storage and analysis

not visualization.

Source: Amazon Redshift Database Developer Guide

"Amazon Redshift system and architecture overview".

The AWS Well-Architected Framework's Reliability Pillar focuses on ensuring a workload performs its intended function correctly and consistently. Two of its core design principles are "Automatically recover from failure" and "Stop guessing capacity." "Automatically recover from failure" involves monitoring for failures and designing systems to trigger automated recovery processes without requiring human intervention. "Stop guessing capacity" addresses a common cause of failure: resource exhaustion. By monitoring demand and automating the addition or removal of resources, a system can maintain optimal levels to satisfy demand, thus preventing failures related to insufficient capacity.

B. Granting everyone access violates the security principle of least privilege and is an operational anti-pattern, not a reliability principle.
D. Designing for a single Availability Zone is contrary to reliability best practices, which recommend multi-AZ architectures for high availability and fault tolerance.
E. This describes a specific operational tactic for managing quotas, not a foundational design principle of the Reliability Pillar itself.

1. AWS Well-Architected Framework. (2023

July). AWS Whitepaper. Page 6

Table 1 "Pillars of the AWS Well-Architected Framework". The table explicitly lists "Automatically recover from failure" and "Stop guessing capacity" as design principles for the Reliability Pillar.

Source: https://d1.awsstatic.com/whitepapers/architecture/AWSWell-ArchitectedFramework.pdf

2. AWS Well-Architected Framework Documentation. (n.d.). Reliability Pillar: Design Principles. AWS. The documentation lists the five design principles for reliability

which include "Automatically recover from failure" and "Stop guessing capacity."

Source: https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/design-principles.html

Amazon Kendra is an intelligent search service powered by machine learning. Its primary function is to enable users to search for information across various content repositories. Kendra can connect to data sources, including Amazon S3, to index documents and their content. It then provides a natural language search capability, allowing users to find specific text within those documents. This directly fulfills the company's requirement to search for text in documents stored in Amazon S3.

B. Amazon Rekognition is an image and video analysis service. While it can detect text in images, it is not a document search service.
C. Amazon Polly is a text-to-speech service that converts written text into lifelike speech; it does not perform search operations.
D. Amazon Lex is a service for building conversational interfaces, such as chatbots, and is not designed for searching document repositories.

1. Amazon Kendra Developer Guide: In the "What is Amazon Kendra?" section, the documentation states, "Amazon Kendra is an intelligent search service powered by machine learning (ML)... so your employees and customers can easily find the content they are looking for... scattered across multiple locations and content repositories". It explicitly lists Amazon S3 as a supported data source. (Source: AWS Documentation, Amazon Kendra Developer Guide, "What is Amazon Kendra?", Section: "How it works").

2. Amazon Rekognition Developer Guide: The "What Is Amazon Rekognition?" section describes the service as one that "makes it easy to add image and video analysis to your applications." This confirms its purpose is analysis, not document search. (Source: AWS Documentation, Amazon Rekognition Developer Guide, "What Is Amazon Rekognition?", First paragraph).

3. Amazon Polly Developer Guide: The "What Is Amazon Polly?" section states, "Amazon Polly is a service that turns text into lifelike speech." This clarifies its function is text-to-speech conversion. (Source: AWS Documentation, Amazon Polly Developer Guide, "What Is Amazon Polly?", First paragraph).

4. Amazon Lex V2 Developer Guide: The "What is Amazon Lex?" section explains, "Amazon Lex is an AWS service for building conversational interfaces for applications using voice and text." This defines its role in creating chatbots. (Source: AWS Documentation, Amazon Lex V2 Developer Guide, "What is Amazon Lex?", First paragraph).

AWS Secrets Manager is a dedicated service designed specifically for the secure storage and lifecycle management of secrets, including passwords, API keys, and database credentials. It provides encryption at rest using AWS Key Management Service (KMS), fine-grained access control through AWS IAM policies, and, most importantly, the ability to automatically rotate secrets on a schedule. This combination of features makes it the most secure and appropriate service for this purpose among the options provided.

A. Storing passwords in an Amazon S3 bucket is not ideal. While S3 supports encryption, it is a general-purpose object storage service and lacks native secret rotation and management capabilities.
B. AWS CloudFormation parameters are used to pass inputs to templates. They are not designed for secure, long-term storage or lifecycle management of secrets like passwords.
C. AWS Storage Gateway is a hybrid cloud storage service that connects on-premises environments to AWS storage. It is irrelevant for managing application secrets like passwords.

1. AWS Secrets Manager User Guide: "AWS Secrets Manager helps you protect secrets needed to access your applications

services

and IT resources. The service enables you to easily rotate

manage

and retrieve database credentials

API keys

and other secrets throughout their lifecycle."

Source: AWS Secrets Manager User Guide

"What is AWS Secrets Manager?"

Introduction.

2. AWS Security Best Practices Whitepaper: This whitepaper emphasizes using dedicated services for managing secrets. "Instead of storing secrets in configuration files or code

we recommend you use a secrets management service like AWS Secrets Manager or AWS Systems Manager Parameter Store."

Source: AWS Security Best Practices Whitepaper (August 2023)

Page 38

"SEC 06: How do you reduce the risk of managing secrets and credentials?".

3. AWS CloudFormation User Guide: This document explains that parameters are for template inputs

and while the NoEcho property can mask values

it does not provide the security of a dedicated secrets manager. "If you set the NoEcho attribute to true

CloudFormation returns the parameter value as a list of asterisks () for any call that describes the stack's events or configuration."

Source: AWS CloudFormation User Guide

"Parameters"

NoEcho section.

AWS Trusted Advisor is an online tool that provides real-time guidance to help you provision your resources following AWS best practices. One of its core functions is to inspect the AWS environment and make recommendations for saving money, improving system performance, and closing security gaps. The Security category of Trusted Advisor includes a specific check for "Security Groups - Unrestricted Access," which identifies security group rules that allow unrestricted inbound traffic (from 0.0.0.0/0) to potentially vulnerable ports, including SSH (port 22). This directly addresses the user's requirement.

A. Amazon Cognito: This service provides identity management for web and mobile applications, handling user sign-up, sign-in, and access control. It does not analyze infrastructure security configurations like security groups.
B. AWS Shield: This is a managed Distributed Denial of Service (DDoS) protection service. It safeguards applications running on AWS from malicious traffic but does not audit security group rules.
C. Amazon Macie: This is a data security service that uses machine learning to discover, classify, and protect sensitive data stored in Amazon S3. It does not inspect network security settings.

1. AWS Trusted Advisor Documentation: "The Security category includes checks that help you secure your AWS services... For example

we check for security groups with unrestricted access..."

Source: AWS Trusted Advisor Documentation

"AWS Trusted Advisor check reference"

Security category. (Specifically

the "Security Groups - Unrestricted Access" check description).

2. AWS Trusted Advisor Documentation: "Checks security groups for rules that allow unrestricted access to specific ports. Unrestricted access (0.0.0.0/0) increases opportunities for malicious activity (hacking

denial-of-service attacks

loss of data). The ports with the highest risk are flagged."

Source: AWS Trusted Advisor Documentation

"Security Groups - Unrestricted Access" check details.

3. Amazon Cognito Documentation: "Amazon Cognito handles user authentication and authorization for your web and mobile apps."

Source: AWS Documentation

"What Is Amazon Cognito?".

4. AWS Shield Documentation: "AWS Shield is a managed distributed denial of service (DDoS) protection service that safeguards applications running on AWS."

Source: AWS Documentation

"What is AWS Shield?".

5. Amazon Macie Documentation: "Amazon Macie is a data security service that discovers sensitive data by using machine learning and pattern matching..."

Source: AWS Documentation

"What is Amazon Macie?".

Amazon QuickSight is a scalable, serverless, machine learning-powered business intelligence (BI) service built for the cloud. Its primary function is to create and publish interactive dashboards and visualizations. AWS Cost and Usage Reports (CUR) are delivered to an Amazon S3 bucket, and QuickSight can directly connect to data in S3 to ingest, analyze, and visualize the cost and usage data, making it the appropriate service for the company's requirement.

B. Amazon Pinpoint: This is a marketing and customer engagement service used for sending communications like emails and SMS messages, not for data visualization.
C. Amazon Neptune: This is a fully managed graph database service designed for applications that work with highly connected datasets, not for general report visualization.
D. Amazon Kinesis: This service is for collecting, processing, and analyzing real-time streaming data, not for visualizing static report files like the AWS CUR.

1. AWS Documentation: Amazon QuickSight User Guide. "What Is Amazon QuickSight?" states

"Amazon QuickSight is a cloud-scale business intelligence (BI) service that you can use to deliver easy-to-understand insights... QuickSight lets you create and publish interactive BI dashboards that include ML-powered insights."

Source: AWS Documentation

Amazon QuickSight User Guide

"What Is Amazon QuickSight?".

2. AWS Documentation: Cost and Usage Reports User Guide. "Creating cost and usage dashboards with Amazon QuickSight" provides a step-by-step tutorial on this exact use case. It states

"You can use Amazon QuickSight to visualize the information in your AWS Cost and Usage Report."

Source: AWS Documentation

AWS Cost and Usage Reports User Guide

Section: "Creating cost and usage dashboards with Amazon QuickSight".

3. AWS Documentation: Amazon Kinesis. "What is Amazon Kinesis?" describes it as a service to "collect

process

and analyze real-time

streaming data so you can get timely insights and react quickly to new information." This confirms it is for real-time streams

not static reports.

Source: AWS Documentation

Amazon Kinesis Developer Guide

"What is Amazon Kinesis?".

4. AWS Documentation: Amazon Neptune. "What Is Amazon Neptune?" defines it as "a fast

reliable

fully managed graph database service that makes it easy to build and run applications that work with highly connected datasets."

Source: AWS Documentation

Amazon Neptune User Guide

"What Is Amazon Neptune?".

Developing and building applications for Apple's iOS platform requires the macOS operating system and the Xcode development environment. Amazon EC2 Mac instances are the only service among the options that provide on-demand macOS environments in the AWS Cloud. These instances run on genuine Apple Mac hardware (like the M1 Mac mini) and are designed specifically for developers to build, test, package, and sign applications for Apple platforms, including iOS, iPadOS, and macOS. This directly addresses the company's need to move its iOS development and build activities to AWS.

A. AWS CodeCommit is a managed source control service for hosting private Git repositories. It stores code but does not provide the computational environment needed to build it.
C. AWS Amplify is a development framework and set of tools for building web and mobile backends. While it can be used with an iOS app, it does not provide the required macOS build environment.
D. AWS App Runner is a fully managed service for deploying containerized web applications and APIs. It is not designed for building native mobile applications like those for iOS.

1. Amazon EC2 Mac instances Documentation: "Amazon EC2 Mac instances allow you to run on-demand macOS workloads in the cloud... With EC2 Mac instances

you can... build

test

package

and sign Xcode applications for the Apple platform including macOS

iOS

iPadOS

tvOS

watchOS

and Safari."

Source: AWS Documentation

"Amazon EC2 Mac instances

" Product Details section.

2. AWS CodeCommit User Guide: "AWS CodeCommit is a version control service hosted by Amazon Web Services that you can use to privately store and manage assets (such as documents

source code

and binary files) in the cloud."

Source: AWS Documentation

AWS CodeCommit User Guide

"What is AWS CodeCommit?

" Introduction.

3. AWS App Runner Developer Guide: "AWS App Runner is an AWS service that provides a fast

simple

and cost-effective way to deploy from source code or a container image directly to a scalable and secure web application."

Source: AWS Documentation

AWS App Runner Developer Guide

"What is AWS App Runner?

" Introduction.

4. AWS Amplify Documentation: "AWS Amplify is a complete solution that lets frontend web and mobile developers easily build

ship

and host full-stack applications on AWS..."

Source: AWS Documentation

AWS Amplify Docs

"What is AWS Amplify?

" Overview.

The AWS Cloud Adoption Framework (AWS CAF) provides guidance on organizational change to support cloud adoption. The question focuses on becoming more responsive to customers, which directly relates to business agility. The AWS CAF's Business Perspective emphasizes using agile methods to rapidly iterate and evolve products and services in response to customer needs. Additionally, the People Perspective advocates for organizational alignment by structuring teams around products and value streams. This structure empowers teams to own the customer experience and respond quickly to feedback, thus fulfilling the company's requirements for organizational transformation.

B. Creating new value propositions is a strategic business outcome that results from agility, not a direct task to achieve it.
D. This is a technical implementation that falls under the Platform Perspective; it supports responsiveness but is not the primary organizational change itself.
E. This is a foundational technical migration activity (Platform Perspective), not the specific organizational transformation required to improve customer responsiveness.

1. AWS. (2021). An Overview of the AWS Cloud Adoption Framework

Version 2. AWS Whitepaper.

Page 10

People perspective

Organizational alignment: "To accelerate your cloud journey

we recommend organizing your teams around products and value streams." This supports option A.

Page 9

Business perspective

Business agility: "Business agility is your organization’s ability to rapidly adapt to and drive market changes for your customers’ benefit... We recommend using agile methods to rapidly iterate and evolve products and services." This supports option C.

2. AWS. (n.d.). AWS Cloud Adoption Framework. AWS Documentation.

Business Perspective section: This section describes how the cloud can enhance business agility

stating

"This perspective helps stakeholders understand how to update the staff skills and organizational processes that are necessary to optimize their business value." This aligns with the organizational changes in options A and C.

AWS Budgets allows you to set custom cost and usage budgets for your AWS services. A key feature of AWS Budgets is its ability to send alerts when your actual or forecasted costs and usage exceed the thresholds you define. This directly addresses the company's requirement to track costs and receive notifications when spending is forecasted to reach a specific level. You can configure these alerts to be delivered via Amazon Simple Notification Service (SNS), email, or AWS Chatbot, ensuring timely notification to manage spending proactively.

B. AWS Cost Explorer is a tool for visualizing and analyzing historical and forecasted cost and usage data, but it does not natively create and send threshold-based alerts.
C. Savings Plans are a flexible pricing model that provides lower prices on compute usage in exchange for a commitment. It is a cost-optimization tool, not a cost-tracking and alerting service.
D. AWS Billing Conductor is a service for customizing billing data for chargeback and showback purposes, typically used by AWS Solution Providers or enterprises with multiple business units.

1. AWS Budgets User Guide: "Managing your costs with AWS Budgets." It states, "You can also set up alerts to notify you when your actual or forecasted cost and usage exceeds, or is forecasted to exceed, your budget." (Source: AWS Documentation, AWS Budgets User Guide, "What is AWS Budgets?")

2. AWS Cost Management Documentation: "AWS Cost Explorer." This document describes Cost Explorer as a tool to "visualize, understand, and manage your AWS costs and usage over time," focusing on analysis and visualization rather than alerting. (Source: AWS Documentation, AWS Cost Management User Guide, "What is AWS Cost Explorer?")

3. AWS Savings Plans User Guide: "What are Savings Plans?" This guide defines Savings Plans as "a flexible pricing model that provides savings of up to 72% on your AWS compute usage." (Source: AWS Documentation, Savings Plans User Guide, "Overview")

4. AWS Billing Conductor User Guide: "What is AWS Billing Conductor?" The guide explains, "AWS Billing Conductor is a customization service that supports the showback and chargeback workflows of AWS Solution Providers and Enterprise customers." (Source: AWS Documentation, AWS Billing Conductor User Guide, "Overview")

Amazon Aurora is a cloud-native relational database service that combines the performance and availability of high-end commercial databases with the simplicity and cost-effectiveness of open-source databases. It is designed to be a drop-in replacement for existing databases and offers full compatibility with two popular open-source database engines: MySQL and PostgreSQL. This allows users to migrate their existing MySQL and PostgreSQL applications and workloads to Aurora with minimal to no code changes, while benefiting from its enhanced performance, scalability, and reliability.

A. Oracle: Amazon Aurora is not compatible with Oracle. For Oracle workloads, AWS offers Amazon RDS for Oracle.
B. Microsoft SQL Server: Amazon Aurora is not compatible with Microsoft SQL Server. AWS provides Amazon RDS for SQL Server for this engine.
E. MongoDB: MongoDB is a NoSQL database. Amazon DocumentDB (with MongoDB compatibility) is the relevant AWS service, not Aurora.

1. AWS Documentation - Amazon Aurora FAQs: Under the "General" section

the question "Q: What relational database engines does Amazon Aurora support?" is answered with: "Amazon Aurora is compatible with MySQL and PostgreSQL."

Source: AWS. (n.d.). Amazon Aurora FAQs. Retrieved from https://aws.amazon.com/rds/aurora/faqs/

2. AWS Documentation - What is Amazon Aurora?: The introductory section states

"Amazon Aurora is a global-scale relational database service built for the cloud

with full MySQL and PostgreSQL compatibility."

Source: AWS. (n.d.). What is Amazon Aurora?. AWS Documentation. Retrieved from https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAPAuroraOverview.html

3. AWS Documentation - Amazon Aurora Features: The overview of features explicitly mentions its compatibility: "Amazon Aurora is a relational database management system (RDBMS) that is compatible with MySQL and PostgreSQL."

Source: AWS. (n.d.). Amazon Aurora Features. Retrieved from https://aws.amazon.com/rds/aurora/features/

AWS CloudTrail is the service designed for governance, compliance, and operational and risk auditing of an AWS account. It provides a detailed event history of actions taken within the account, including API calls made through the AWS Management Console, AWS SDKs, and command-line tools. CloudTrail logs capture crucial information such as the identity of the user or service that made the request, the time of the request, the source IP address, and the specific action performed, such as terminating an EC2 instance. This makes it the definitive tool for identifying who performed a specific action.

A. Amazon CloudWatch is a monitoring and observability service for AWS resources and applications. It collects metrics and logs for performance analysis, not for auditing user API activity.
B. AWS Trusted Advisor is an online tool that provides real-time guidance to help you provision your resources following AWS best practices across cost, performance, security, and fault tolerance.
D. Amazon Inspector is an automated vulnerability management service that continuously scans AWS workloads for software vulnerabilities and unintended network exposure. It does not track user actions.

1. AWS CloudTrail User Guide: "What Is AWS CloudTrail?" section states, "CloudTrail is an AWS service that helps you enable governance, compliance, and operational and risk auditing of your AWS account. Actions taken by a user, role, or an AWS service are recorded as events in CloudTrail."

2. AWS CloudTrail User Guide: In the "Viewing events with CloudTrail Event history" section, it details how to find information about events, including "who made the request." This directly addresses the question's requirement.

3. AWS Documentation - Amazon CloudWatch: The "What is Amazon CloudWatch?" page describes it as a service that "collects monitoring and operational data in the form of logs, metrics, and events," focusing on performance and health, not user auditing.

4. AWS Documentation - AWS Trusted Advisor: The "How AWS Trusted Advisor works" section explains its function is to "inspect your AWS environment and then makes recommendations when opportunities exist to save money, improve system availability and performance, or help close security gaps."

AWS CodeDeploy is a fully managed deployment service that automates software deployments to a variety of compute services, including Amazon EC2, AWS Fargate, AWS Lambda, and on-premises servers. It simplifies the process of rapidly releasing new features by automating the code deployment process, which helps to avoid downtime during application deployment and handles the complexity of updating applications. CodeDeploy is a core component of a continuous integration and continuous delivery (CI/CD) pipeline on AWS, directly fulfilling the requirement to release application changes in an automated way.

A. Amazon AppFlow is a fully managed integration service that automates secure data flows between SaaS applications and AWS services, not for deploying application code.
C. AWS PrivateLink provides private, secure connectivity between VPCs, AWS services, and on-premises networks. It is a networking service, not a deployment automation tool.
D. Amazon EKS Distro is a Kubernetes distribution used to build and run Kubernetes clusters. It is the platform, not the service that automates application releases onto it.

1. AWS CodeDeploy User Guide: "AWS CodeDeploy is a deployment service that automates application deployments to Amazon EC2 instances, on-premises instances, serverless Lambda functions, or Amazon ECS services." (Source: AWS CodeDeploy User Guide, "What Is CodeDeploy?", Introduction section).

2. Amazon AppFlow User Guide: "Amazon AppFlow is a fully managed integration service that you can use to securely transfer data between Software-as-a-Service (SaaS) applications... and AWS services." (Source: Amazon AppFlow User Guide, "What is Amazon AppFlow?", Introduction section).

3. AWS PrivateLink Documentation: "With AWS PrivateLink, you can simplify your network architecture by connecting your services across different accounts and VPCs... It provides private connectivity between VPCs, AWS services, and your on-premises networks." (Source: AWS PrivateLink Documentation, "What is AWS PrivateLink?", Introduction section).

4. Amazon EKS Distro Documentation: "Amazon EKS Distro is a Kubernetes distribution based on and used by Amazon Elastic Kubernetes Service (EKS) to create reliable and secure Kubernetes clusters." (Source: Amazon EKS Distro Documentation, Home page, Introduction paragraph).