[{"data":1,"prerenderedAt":590},["ShallowReactive",2],{"practiceExams":3,"practice-exam-questions-\u002Fpractice-exams\u002Faws-certified-advanced-networking-specialty\u002Fquestions":153},[4,17,28,39,49,59,70,80,90,101,111,122,134,145],{"id":5,"slug":6,"description":7,"questionCount":8,"isActive":9,"datePublicModified":10,"difficulty":11,"examVersion":16},1,"aws-certified-solutions-architect-associate-saa-c03","Unlock your potential with the AWS Certified Solutions Architect - Associate Practice Exam Simulator. This comprehensive tool is designed to prepare you thoroughly and assess your readiness for the most sought-after AWS associate certification.",1203,true,"2026-10-30T00:00:00.000Z",{"title":12,"subtitle":13,"slug":14,"coverImageUrl":15},"AWS Certified Solutions Architect - Associate","SAA-C03","aws-certified-solutions-architect-associate","\u002Fimages\u002Fdifficulties\u002Faws-certified-solutions-architect-associatesaa-c03\u002Fcovers\u002Faws-SAA-C03.png",{"slug":6,"pageSlug":14},{"id":18,"slug":19,"description":20,"questionCount":21,"isActive":9,"datePublicModified":10,"difficulty":22,"examVersion":27},5,"aws-certified-cloud-practitioner-clf-c02","Master your AWS Certified Cloud Practitioner exam with our Practice Exam Simulator. Prepare effectively and assess your readiness with realistic practice exams designed to mirror the most popular official AWS exam.",937,{"title":23,"subtitle":24,"slug":25,"coverImageUrl":26},"AWS Certified Cloud Practitioner","CLF-C02","aws-certified-cloud-practitioner","\u002Fimages\u002Fdifficulties\u002Faws-certified-cloud-practitionerclf-c02\u002Fcovers\u002Faws-CLF-C02.png",{"slug":19,"pageSlug":25},{"id":29,"slug":30,"description":31,"questionCount":32,"isActive":9,"datePublicModified":10,"difficulty":33,"examVersion":38},8,"aws-certified-devops-engineer-professional-dop-c02","Boost your readiness for the AWS Certified DevOps Engineer - Professional (DOP-C02) exam with our practice exam simulator. Featuring realistic questions and detailed explanations, it helps you identify knowledge gaps and improve your skills.",1040,{"title":34,"subtitle":35,"slug":36,"coverImageUrl":37},"AWS Certified DevOps Engineer - Professional","DOP-C02","aws-certified-devops-engineer-professional","",{"slug":30,"pageSlug":36},{"id":40,"slug":41,"description":42,"questionCount":43,"isActive":9,"datePublicModified":10,"difficulty":44,"examVersion":48},9,"aws-certified-data-engineer-associate-dea-c01","Prepare for your AWS Certified Data Engineer - Associate exam with our practice exam simulator. Featuring real exam scenarios, detailed explanations, and instant feedback to boost your confidence and success rate.",891,{"title":45,"subtitle":46,"slug":47,"coverImageUrl":37},"AWS Certified Data Engineer - Associate","DEA-C01","aws-certified-data-engineer-associate",{"slug":41,"pageSlug":47},{"id":50,"slug":51,"description":52,"questionCount":53,"isActive":9,"datePublicModified":10,"difficulty":54,"examVersion":58},11,"aws-certified-ai-practitioner-aif-c01","Prepare for the AWS Certified AI Practitioner exam with our practice exam simulator. Realistic questions on AI, machine learning and generative AI fundamentals, with detailed explanations, help you find your knowledge gaps and assess your readiness.",928,{"title":55,"subtitle":56,"slug":57,"coverImageUrl":37},"AWS Certified AI Practitioner","AIF-C01","aws-certified-ai-practitioner",{"slug":51,"pageSlug":57},{"id":60,"slug":61,"description":62,"questionCount":63,"isActive":9,"datePublicModified":64,"difficulty":65,"examVersion":69},17,"aws-certified-generative-ai-developer-professional-aip-c01","Get ready for the AWS Certified Generative AI Developer - Professional exam with our practice exam simulator. Realistic scenario-based questions with detailed explanations help you assess your readiness to build generative AI solutions on AWS.",982,"2026-10-29T00:00:00.000Z",{"title":66,"subtitle":67,"slug":68,"coverImageUrl":37},"AWS Certified Generative AI Developer - Professional","AIP-C01","aws-certified-generative-ai-developer-professional",{"slug":61,"pageSlug":68},{"id":71,"slug":72,"description":73,"questionCount":74,"isActive":9,"datePublicModified":64,"difficulty":75,"examVersion":79},19,"aws-certified-machine-learning-engineer-associate-mla-c02","Prepare for the AWS Certified Machine Learning Engineer - Associate exam with our practice exam simulator. Realistic questions with detailed explanations help you find your knowledge gaps and assess your readiness to build and run ML workloads on AWS.",861,{"title":76,"subtitle":77,"slug":78,"coverImageUrl":37},"AWS Certified Machine Learning Engineer - Associate","MLA-C02","aws-certified-machine-learning-engineer-associate",{"slug":72,"pageSlug":78},{"id":81,"slug":82,"description":83,"questionCount":84,"isActive":9,"datePublicModified":64,"difficulty":85,"examVersion":89},21,"aws-certified-cloudops-engineer-associate-soa-c03","Prepare for the AWS Certified CloudOps Engineer - Associate exam with our practice exam simulator. Realistic questions with detailed explanations help you assess your readiness to deploy, operate and troubleshoot workloads on AWS.",862,{"title":86,"subtitle":87,"slug":88,"coverImageUrl":37},"AWS Certified CloudOps Engineer - Associate","SOA-C03","aws-certified-cloudops-engineer-associate",{"slug":82,"pageSlug":88},{"id":91,"slug":92,"description":93,"questionCount":94,"isActive":9,"datePublicModified":64,"difficulty":95,"examVersion":100},13,"aws-certified-security-specialty-scs-c03","Advance your career in cloud security with the AWS Certified Security - Specialty (SCS-C03) Exam Simulator. Realistic, scenario-based practice exams mirror the official exam, with detailed explanations to close your knowledge gaps.",864,{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},"AWS Certified Security - Specialty","SCS-C03","aws-certified-security-specialty","\u002Fimages\u002Fdifficulties\u002Faws-certified-security-specialtyscs-c02\u002Fcovers\u002Faws_SCS_c02.png",{"slug":92,"pageSlug":98},{"id":102,"slug":103,"description":104,"questionCount":105,"isActive":9,"datePublicModified":64,"difficulty":106,"examVersion":110},15,"aws-certified-ai-business-strategist-aib-c01","Prepare for the AWS Certified AI Business Strategist exam with our practice exam simulator. Realistic, scenario-based questions with detailed explanations help you assess your readiness to lead AI adoption on AWS and close your knowledge gaps.",848,{"title":107,"subtitle":108,"slug":109,"coverImageUrl":37},"AWS Certified AI Business Strategist","AIB-C01","aws-certified-ai-business-strategist",{"slug":103,"pageSlug":109},{"id":112,"slug":113,"description":114,"questionCount":115,"isActive":9,"datePublicModified":116,"difficulty":117,"examVersion":121},10,"aws-certified-advanced-networking-specialty-ans-c01","The AWS Certified Advanced Networking - Specialty practice exam simulates the real test, offering scenario-based questions that assess your ability to design, implement, and troubleshoot complex AWS networking solutions. ",681,"2024-11-13T00:00:00.000Z",{"title":118,"subtitle":119,"slug":120,"coverImageUrl":37},"AWS Certified Advanced Networking - Specialty","ANS-C01","aws-certified-advanced-networking-specialty",{"slug":113,"pageSlug":120},{"id":123,"slug":124,"description":125,"questionCount":126,"isActive":9,"datePublicModified":127,"difficulty":128,"examVersion":133},4,"aws-certified-developer-associate-dva-c02","Unlock your potential as a software developer with the AWS Certified Developer - Associate Exam Simulator! Prepare thoroughly with realistic practice exams designed to mirror the official exam.",399,"2024-06-06T00:00:00.000Z",{"title":129,"subtitle":130,"slug":131,"coverImageUrl":132},"AWS Certified Developer - Associate","DVA-C02","aws-certified-developer-associate","\u002Fimages\u002Fdifficulties\u002Faws-certified-developer-associatedva-c02\u002Fcovers\u002Faws-DVA-C02.png",{"slug":124,"pageSlug":131},{"id":135,"slug":136,"description":137,"questionCount":138,"isActive":9,"datePublicModified":127,"difficulty":139,"examVersion":144},6,"aws-certified-solutions-architect-professional-sap-c02","Elevate your career with the AWS Certified Solutions Architect - Professional Exam Simulator. Get ready to ace the most popular Professional AWS exam with our realistic practice exams. Assess your readiness, boost your confidence, and ensure your success.",789,{"title":140,"subtitle":141,"slug":142,"coverImageUrl":143},"AWS Certified Solutions Architect - Professional","SAP-C02","aws-certified-solutions-architect-professional","\u002Fimages\u002Fdifficulties\u002Faws-certified-solutions-architect-professionalsap-c02\u002Fcovers\u002Faws-SAP-C02.png",{"slug":136,"pageSlug":142},{"id":146,"slug":147,"description":148,"questionCount":149,"isActive":9,"datePublicModified":127,"difficulty":150,"examVersion":151},7,"aws-certified-security-specialty-scs-c02","Advance your career in cloud cybersecurity with the AWS Certified Security - Specialty Exam Simulator! Tailored for professionals, this tool offers realistic practice exams to mirror the official exam.",5431,{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},{"slug":147,"pageSlug":152},null,{"id":112,"slug":113,"description":114,"content":154,"formalQuestionCount":155,"minQuestionCount":5,"maxQuestionCount":156,"formalTimeLimitCount":157,"minTimeLimitCount":5,"maxTimeLimitCount":158,"passingScore":156,"questionCount":115,"isActive":9,"dateCreated":159,"dateModified":160,"datePublicModified":116,"difficulty":161,"examVersion":588,"tags":589,"previousExamVersion":152,"newerExamVersion":152},"\u003Cp>\u003Cspan class=\"text-big\">The AWS Certified Advanced Networking - Specialty (ANS-C01) certification is a highly specialized credential aimed at professionals with advanced networking skills and extensive experience in designing and implementing AWS and hybrid IT network architectures at scale. The exam tests a deep understanding of a broad range of AWS networking services and concepts, along with the ability to design, develop, and deploy complex cloud-based solutions using the Amazon Web Services platform.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">A significant portion of the exam focuses on networking fundamentals and concepts, requiring candidates to have a strong grasp of the OSI model and how various networking protocols map to it. Understanding IP addressing, particularly in IPv4 and IPv6, is crucial, including subnetting, CIDR (Classless Inter-Domain Routing), and the differences between these IP versions. Additionally, knowledge of routing and switching is vital, with an emphasis on static and dynamic routing protocols such as RIP, OSPF, and BGP, as well as concepts like route tables, network address translation (NAT), and switching mechanisms.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">The exam extensively covers AWS networking services, beginning with Amazon VPC (Virtual Private Cloud), a core service that allows the creation of isolated networks within AWS. Candidates are expected to understand VPC components, including subnets, route tables, security groups, and Network ACLs (NACLs). Additionally, the exam delves into more advanced VPC features like VPC Peering, Transit Gateway, and VPC endpoints. AWS Direct Connect is another critical service, providing a dedicated network connection from an on-premises environment to AWS, and the exam assesses knowledge of its setup, configuration, and use cases.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">AWS VPN is also a key service, with the exam focusing on both Site-to-Site VPN and Client VPN, including setup, encryption standards, and integration with VPCs and on-premises networks. Elastic Load Balancing (ELB) is another important topic, where candidates must have detailed knowledge of application, network, and gateway load balancers, including their use cases and configuration. The exam also evaluates understanding of AWS Global Accelerator, which is used to improve global application performance by leveraging AWS’s global network infrastructure.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">Amazon Route 53, AWS’s DNS service, plays a significant role in the exam, with candidates needing to demonstrate knowledge of routing policies such as latency-based, geolocation, and failover, as well as domain registration and health checks. AWS Transit Gateway, which allows the interconnection of VPCs and on-premises networks via a central hub, is another critical topic, including concepts like route propagation, attachments, and segmentation. Amazon CloudFront, a content delivery network (CDN) service, is also covered, with a focus on edge locations, distribution types, and caching strategies.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">Security is a major theme in the exam, with an emphasis on securing AWS networking components using security groups, NACLs, AWS Web Application Firewall (WAF), and Shield (DDoS protection). Candidates must also understand encryption, both in-transit and at-rest, as well as AWS compliance frameworks like PCI DSS, HIPAA, and GDPR, and how they impact network design. Disaster recovery and high availability strategies are also tested, including Multi-AZ and Multi-Region architectures, failover mechanisms, and data replication to ensure network resilience and data redundancy.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">The exam also tests knowledge of network automation and monitoring. Candidates need to be proficient in using AWS CloudFormation, AWS CLI, and SDKs for automating network deployments, as well as third-party automation tools like Terraform. Monitoring and troubleshooting are equally important, with expertise in using Amazon CloudWatch, VPC Flow Logs, AWS Config, and AWS CloudTrail to monitor, troubleshoot, and audit network activity. The exam may present scenarios requiring the identification and resolution of network performance issues.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">Hybrid networking and multi-account environments are also key areas of focus. Candidates must understand hybrid cloud architectures, including connecting on-premises networks with AWS using services like AWS Direct Connect and VPN. The exam also includes scenarios involving multiple AWS accounts, VPC peering, and shared services, and requires knowledge of AWS Organizations and best practices for managing networking across multiple AWS accounts, including the use of centralized logging and monitoring, shared VPCs, and resource access management.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">The \u003Cstrong>AWS Certified Advanced Networking - Specialty (ANS-C01)\u003C\u002Fstrong> exam is known for its difficulty. It requires a deep understanding of AWS networking services and the ability to apply this knowledge to complex, real-world scenarios. The depth of knowledge required is significant, with the exam testing advanced networking concepts that go beyond basic AWS networking. The questions are often scenario-based, requiring candidates to design or troubleshoot a network architecture, which tests both knowledge and problem-solving skills. The breadth of services covered is also extensive, requiring candidates to understand how different AWS services integrate with each other, adding to the challenge. Additionally, the time pressure of the exam, with its detailed and time-consuming questions, makes effective time management crucial.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cspan class=\"text-big\">Overall, the AWS Certified Advanced Networking - Specialty (ANS-C01) certification is an excellent credential for professionals seeking to demonstrate their expertise in AWS networking. It validates a candidate’s ability to design, deploy, and maintain complex network architectures on AWS, making it a valuable certification for network engineers, architects, and systems administrators. However, due to its difficulty, it requires thorough preparation and substantial practical experience with AWS networking services.\u003C\u002Fspan>\u003C\u002Fp>",65,75,170,200,"2024-08-28T09:20:54.226Z","2026-10-29T23:42:57.000Z",{"id":29,"title":118,"subtitle":119,"rating":18,"slug":120,"guideUrl":152,"categories":162,"services":333},[163,215,257,295],{"id":164,"title":165,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":166,"subcategories":167},108,"Network Design",30,[168,172,199,203,207,211],{"id":169,"title":170,"subtitle":152,"description":152,"questions":171},412,"Design a solution that incorporates edge network services to optimize user performance and traffic management for global architectures",[],{"id":173,"title":174,"subtitle":152,"description":152,"questions":175},413,"Design DNS solutions that meet public, private, and hybrid requirements",[176],{"id":177,"subcategoryId":173,"content":178,"hint":179,"type":180,"isPublic":9,"answers":181},50994,"A company runs an HTTPS application behind internet-facing Application Load Balancers (ALBs) in two AWS Regions. Route 53 latency alias records point to the ALBs, with Evaluate Target Health enabled. Each ALB has multiple listener rules that forward requests to separate production target groups. The company requires Route 53 to exclude a Region from new DNS responses if any production target group in that Region has no healthy targets, provided the other Region remains healthy.\n\nAfter a deployment, Route 53 stops returning one Region's ALB even though every production target group in that Region has healthy targets. Engineers discover that an obsolete preview listener rule on that ALB still references a target group with no registered targets. The preview service is permanently retired.\n\nWhich change will restore latency-based routing to both Regions while preserving the required health-based exclusion behavior?","Consider how Route 53 derives an ALB alias target's health when the ALB has several associated target groups.","single",[182,187,191,195],{"id":183,"questionId":177,"content":184,"hint":185,"isCorrect":186,"position":152,"matchAnswerId":152},228935,"Increase the unhealthy threshold for all production target group health checks on the affected ALB while retaining the preview listener rule and both latency alias records.","The production targets are already healthy. Changing their unhealthy thresholds does not resolve the empty preview target group, which has no targets that could pass health checks and continues to make the ALB unhealthy for Route 53 alias health evaluation.",false,{"id":188,"questionId":177,"content":189,"hint":190,"isCorrect":9,"position":152,"matchAnswerId":152},228936,"Remove the obsolete preview listener rule and delete its unused target group. Keep Evaluate Target Health enabled on both latency alias records.","With Evaluate Target Health enabled, Route 53 considers an ALB healthy only when every associated target group has at least one healthy target. An associated target group with no registered targets is unhealthy. Removing the retired service's association eliminates the false regional failure while preserving health evaluation for every production target group.",{"id":192,"questionId":177,"content":193,"hint":194,"isCorrect":186,"position":152,"matchAnswerId":152},228937,"Create a Route 53 HTTPS health check against a working production path on the affected ALB and associate it with that Region's latency alias record while keeping Evaluate Target Health enabled.","When an alias record has both an associated health check and Evaluate Target Health enabled, both health evaluations must pass. A successful HTTPS check does not override the unhealthy status inherited from the ALB's empty associated target group.",{"id":196,"questionId":177,"content":197,"hint":198,"isCorrect":186,"position":152,"matchAnswerId":152},228938,"Disable Evaluate Target Health on the affected Region's latency alias record and retain the ALB's existing target group health checks.","ALB target group health checks control regional target selection, but they do not independently cause Route 53 to exclude an alias record when Evaluate Target Health is disabled. This change would remove the required DNS-level health-based exclusion.",{"id":200,"title":201,"subtitle":152,"description":152,"questions":202},414,"Design solutions that integrate load balancing to meet high availability, scalability, and security requirements",[],{"id":204,"title":205,"subtitle":152,"description":152,"questions":206},415,"Define logging and monitoring requirements across AWS and hybrid networks",[],{"id":208,"title":209,"subtitle":152,"description":152,"questions":210},416,"Design a routing strategy and connectivity architecture between on-premises networks and the AWS Cloud",[],{"id":212,"title":213,"subtitle":152,"description":152,"questions":214},417,"Design a routing strategy and connectivity architecture that include multiple AWS accounts, AWS Regions, and VPCs to support different connectivity patterns",[],{"id":216,"title":217,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":218,"subcategories":219},109,"Network Implementation",26,[220,245,249,253],{"id":221,"title":222,"subtitle":152,"description":152,"questions":223},418,"Implement routing and connectivity between on-premises networks and the AWS Cloud",[224],{"id":225,"subcategoryId":221,"content":226,"hint":227,"type":180,"isPublic":9,"answers":228},51088,"A company connects its data center to an AWS Transit Gateway through AWS Site-to-Site VPN. A transit gateway VPC attachment provides access to an application on an EC2 instance. After a network change, an on-premises client cannot establish TCP connections to the instance on port 443. Transit Gateway Network Manager Route Analyzer reports that the VPN attachment can reach the VPC attachment in both directions.\n\nBefore authorizing live test traffic, a network engineer must check whether the VPC configuration permits the client's inbound connection and identify any blocking configuration. Which approach best meets these requirements?","Consider the boundaries of attachment-level route analysis and the direction of the connection that must be evaluated.",[229,233,237,241],{"id":230,"questionId":225,"content":231,"hint":232,"isCorrect":186,"position":152,"matchAnswerId":152},229341,"Enable VPC Flow Logs with the ALL traffic filter on the instance's network interface. Use the absence of REJECT records during the assessment period to confirm that the VPC configuration permits the connection.","Flow logs describe observed traffic rather than simulate connectivity. Without test traffic, the absence of REJECT records does not demonstrate that the connection would be permitted. Flow logs also do not directly identify the particular security group or network ACL rule responsible for a rejection.",{"id":234,"questionId":225,"content":235,"hint":236,"isCorrect":9,"position":152,"matchAnswerId":152},229342,"Use VPC Reachability Analyzer to model the inbound path from the VPC's transit gateway attachment to the instance's network interface. Specify TCP destination port 443 and the on-premises client's source IP address, and inspect the analysis for blocking VPC components.","Reachability Analyzer performs configuration-based analysis without sending packets. Modeling the inbound AWS-side path with the client's source address and destination port can identify blocking security groups, network ACLs, and route configuration. This complements Route Analyzer's attachment-level results; it does not independently validate the on-premises network or live VPN data plane.",{"id":238,"questionId":225,"content":239,"hint":240,"isCorrect":186,"position":152,"matchAnswerId":152},229343,"Run another bidirectional Route Analyzer analysis between the VPN and VPC attachments, specifying TCP port 443. Use its results to validate the instance security group and subnet network ACL.","Route Analyzer evaluates transit gateway routing between attachments. It does not validate the instance security group or the subnet network ACL, so successful attachment-level routing does not establish that the VPC permits the connection.",{"id":242,"questionId":225,"content":243,"hint":244,"isCorrect":186,"position":152,"matchAnswerId":152},229344,"Use VPC Reachability Analyzer with the instance's network interface as the source and the VPC's transit gateway attachment as the destination. Specify TCP destination port 443 and use a reachable result to validate the client's inbound connection.","This models an instance-initiated connection toward the on-premises network, not the client's inbound connection. Security group direction, network ACL direction, and destination-port matching differ, so a reachable result for this path cannot validate the required inbound flow.",{"id":246,"title":247,"subtitle":152,"description":152,"questions":248},419,"Implement routing and connectivity across multiple AWS accounts, Regions, and VPCs to support different connectivity patterns",[],{"id":250,"title":251,"subtitle":152,"description":152,"questions":252},420,"Implement complex hybrid and multi-account DNS architectures",[],{"id":254,"title":255,"subtitle":152,"description":152,"questions":256},421,"Automate and configure network infrastructure",[],{"id":258,"title":259,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":260,"subcategories":261},110,"Network Management and Operation",20,[262,266,270],{"id":263,"title":264,"subtitle":152,"description":152,"questions":265},422,"Maintain routing and connectivity on AWS and hybrid networks",[],{"id":267,"title":268,"subtitle":152,"description":152,"questions":269},423,"Monitor and analyze network traffic to troubleshoot and optimize connectivity patterns",[],{"id":271,"title":272,"subtitle":152,"description":152,"questions":273},424,"Optimize AWS networks for performance, reliability, and cost-effectiveness",[274],{"id":275,"subcategoryId":271,"content":276,"hint":277,"type":180,"isPublic":9,"answers":278},51217,"A financial analytics application transfers data between two Amazon EC2 instances in the same Availability Zone by using a single long-lived TCP connection. Each instance supports 100 Gbps networking and ENA Express, but the connection currently achieves approximately 5 Gbps. Testing confirms that CPU, memory, storage, and TCP window sizes are not bottlenecks. The company needs at least 15 Gbps for this single connection and lower tail latency during network congestion. The application cannot be modified to use a different networking library or multiple connections. Which change best meets these requirements without increasing the instance sizes?","Distinguish aggregate instance bandwidth from single-flow bandwidth, and consider which acceleration mechanism works transparently with existing TCP applications.",[279,283,287,291],{"id":280,"questionId":275,"content":281,"hint":282,"isCorrect":9,"position":152,"matchAnswerId":152},229901,"Enable ENA Express on the network interfaces used by both instances for the connection.","ENA Express uses AWS Scalable Reliable Datagram (SRD) transparently for supported TCP and UDP traffic between eligible instances in the same Availability Zone. It supports single-flow bandwidth of up to 25 Gbps and reduces tail latency under congestion without requiring application changes. Both communicating interfaces must have ENA Express enabled.",{"id":284,"questionId":275,"content":285,"hint":286,"isCorrect":186,"position":152,"matchAnswerId":152},229902,"Configure Elastic Fabric Adapter interfaces on both instances and continue using the application's existing TCP socket connection without enabling ENA Express.","EFA's OS-bypass acceleration requires a supported communication stack, such as libfabric, rather than an unchanged TCP socket application. An EFA interface's ordinary IP traffic uses ENA functionality, so adding EFA alone does not provide the required acceleration for this connection.",{"id":288,"questionId":275,"content":289,"hint":290,"isCorrect":186,"position":152,"matchAnswerId":152},229903,"Attach a second ENA-backed network interface to each instance and configure equal-cost routes across both interfaces for the existing TCP connection.","Additional interfaces do not automatically aggregate bandwidth for one TCP flow or raise its single-flow limit. Multipath routing generally distributes traffic by flow rather than combining interfaces into a faster path for an unchanged single connection.",{"id":292,"questionId":275,"content":293,"hint":294,"isCorrect":186,"position":152,"matchAnswerId":152},229904,"Move both instances into a cluster placement group and enable jumbo frames, while continuing to use standard ENA networking.","Cluster placement groups improve network performance, and jumbo frames can reduce packet-processing overhead. However, standard ENA networking supports up to 10 Gbps for a single flow between instances in a cluster placement group, which does not meet the 15 Gbps requirement.",{"id":296,"title":297,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":298,"subcategories":299},111,"Network Security, Compliance, and Governance",24,[300,325,329],{"id":301,"title":302,"subtitle":152,"description":152,"questions":303},425,"Implement and maintain network features to meet security and compliance needs and requirements",[304],{"id":305,"subcategoryId":301,"content":306,"hint":307,"type":180,"isPublic":9,"answers":308},51249,"A company connects workload VPCs in multiple AWS accounts through a centrally managed AWS Transit Gateway. Compliance requires all inter-VPC traffic to pass through stateful firewall appliances in an inspection VPC. The inspection VPC has a transit gateway attachment subnet and a firewall appliance in each of two Availability Zones. VPC routing directs traffic from each attachment subnet through the firewall in that Availability Zone.\n\nThe transit gateway route tables send traffic from workload attachments to the inspection attachment and send inspected traffic to the destination workload attachment. No direct workload-to-workload routes bypass inspection. During testing, some connections between workloads in different Availability Zones fail. Packet captures show that the forward and return packets traverse different firewall appliances, which drop packets because connection state is not shared. Security groups and network ACLs permit the required traffic.\n\nWhich change will resolve the failures while retaining stateful inspection and the two-Availability-Zone architecture?","Distinguish selecting the next attachment from maintaining a consistent Availability Zone within an attachment for a traffic flow.",[309,313,317,321],{"id":310,"questionId":305,"content":311,"hint":312,"isCorrect":186,"position":152,"matchAnswerId":152},230037,"Enable appliance mode on every workload VPC attachment, but leave the inspection VPC attachment unchanged.","Appliance mode must be enabled on the attachment for the VPC containing the stateful appliances. Enabling it only on workload attachments does not maintain flow symmetry through the inspection VPC's firewall appliances.",{"id":314,"questionId":305,"content":315,"hint":316,"isCorrect":186,"position":152,"matchAnswerId":152},230038,"Associate each workload attachment with a separate transit gateway route table, giving each table the same routes to the inspection attachment as the current workload-facing table.","Separate route tables can provide routing isolation, but duplicating the existing routes does not change the Availability Zone selection within the inspection attachment. The forward and return traffic can still traverse different stateful firewalls.",{"id":318,"questionId":305,"content":319,"hint":320,"isCorrect":9,"position":152,"matchAnswerId":152},230039,"Enable appliance mode on the inspection VPC's transit gateway attachment and retain the existing inspection routing.","Transit Gateway appliance mode maintains flow affinity to the same Availability Zone in the inspection VPC attachment for the lifetime of a flow, including return traffic. With the existing per-AZ routing through the firewalls, both directions traverse the same stateful appliance. Both Availability Zones can remain available for inspection.",{"id":322,"questionId":305,"content":323,"hint":324,"isCorrect":186,"position":152,"matchAnswerId":152},230040,"Replace the workload-facing default routes to the inspection attachment with more-specific static routes for every destination workload CIDR, still targeting the inspection attachment.","More-specific routes can control which attachment receives traffic, but they do not select or preserve the Availability Zone used within that attachment. Because traffic already reaches the inspection attachment, this change does not resolve the asymmetric firewall paths.",{"id":326,"title":327,"subtitle":152,"description":152,"questions":328},426,"Validate and audit security by using network monitoring and logging services",[],{"id":330,"title":331,"subtitle":152,"description":152,"questions":332},427,"Implement and maintain confidentiality of data and communications of the network",[],[334,339,345,350,355,361,367,373,379,385,391,397,403,409,415,421,427,433,439,445,450,456,462,468,474,480,486,492,498,504,510,516,522,528,534,540,546,552,558,564,570,576,582],{"id":81,"title":335,"description":336,"slug":337,"coverImageUrl":338},"Amazon EventBridge","Amazon EventBridge is a serverless event bus service provided by AWS that enables applications to communicate with each other using events, facilitating the building of event-driven architectures.","amazon-eventbridge","\u002Fimages\u002Fprovider-services\u002Famazon-eventbridge\u002Fcovers\u002FArch_Amazon-EventBridge_64.png",{"id":340,"title":341,"description":342,"slug":343,"coverImageUrl":344},23,"Amazon Simple Notification Service (Amazon SNS)","Amazon Simple Notification Service (Amazon SNS) is a fully managed messaging service for both application-to-application (A2A) and application-to-person (A2P) communication, enabling the delivery of messages or notifications to subscribers or other applications.","amazon-simple-notification-service-(amazon-sns)","\u002Fimages\u002Fprovider-services\u002Famazon-simple-notification-service-(amazon-sns)\u002Fcovers\u002FArch_Amazon-Simple-Notification-Service_64.png",{"id":298,"title":346,"description":347,"slug":348,"coverImageUrl":349},"Amazon Simple Queue Service (Amazon SQS)","Amazon Simple Queue Service (Amazon SQS) is a scalable, fully managed message queuing service that enables the decoupling and scaling of microservices, distributed systems, and serverless applications.","amazon-simple-queue-service-(amazon-sqs)","\u002Fimages\u002Fprovider-services\u002Famazon-simple-queue-service-(amazon-sqs)\u002Fcovers\u002FArch_Amazon-Simple-Queue-Service_64.png",{"id":166,"title":351,"description":352,"slug":353,"coverImageUrl":354},"AWS Cost Explorer","AWS Cost Explorer is a web service that allows users to visualize, understand, and manage their Amazon Web Services (AWS) costs and usage over time through detailed reports and analytics.","aws-cost-explorer","\u002Fimages\u002Fprovider-services\u002Faws-cost-explorer\u002Fcovers\u002FArch_AWS-Cost-Explorer_64.png",{"id":356,"title":357,"description":358,"slug":359,"coverImageUrl":360},34,"Amazon EC2","Amazon EC2 (Elastic Compute Cloud) is a web service that provides resizable compute capacity in the cloud, allowing users to run and manage virtual servers.","amazon-ec2","\u002Fimages\u002Fprovider-services\u002Famazon-ec2\u002Fcovers\u002FArch_Amazon-EC2_64.png",{"id":362,"title":363,"description":364,"slug":365,"coverImageUrl":366},36,"Amazon EC2 Auto Scaling","Amazon EC2 Auto Scaling is a service that automatically adjusts the number of Amazon EC2 instances in your deployment to maintain performance and minimize costs based on defined conditions such as traffic or resource utilization.","amazon-ec2-auto-scaling","\u002Fimages\u002Fprovider-services\u002Famazon-ec2-auto-scaling\u002Fcovers\u002FArch_Amazon-EC2-Auto-Scaling_64.png",{"id":368,"title":369,"description":370,"slug":371,"coverImageUrl":372},48,"Amazon Elastic Container Registry (Amazon ECR)","Amazon Elastic Container Registry (Amazon ECR) is a fully managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images.","amazon-elastic-container-registry-(amazon-ecr)","\u002Fimages\u002Fprovider-services\u002Famazon-elastic-container-registry-(amazon-ecr)\u002Fcovers\u002FArch_Amazon-Elastic-Container-Registry_64.png",{"id":374,"title":375,"description":376,"slug":377,"coverImageUrl":378},54,"Amazon Elastic Container Service (Amazon ECS)","Amazon Elastic Container Service (Amazon ECS) is a fully managed container orchestration service that allows you to run and scale containerized applications on AWS.","amazon-elastic-container-service-(amazon-ecs)","\u002Fimages\u002Fprovider-services\u002Famazon-elastic-container-service-(amazon-ecs)\u002Fcovers\u002FArch_Amazon-Elastic-Container-Service_64.png",{"id":380,"title":381,"description":382,"slug":383,"coverImageUrl":384},55,"Amazon Elastic Kubernetes Service (Amazon EKS)","Amazon Elastic Kubernetes Service (Amazon EKS) is a managed service that makes it easy to deploy, manage, and scale containerized applications using Kubernetes on AWS.","amazon-elastic-kubernetes-service-(amazon-eks)","\u002Fimages\u002Fprovider-services\u002Famazon-elastic-kubernetes-service-(amazon-eks)\u002Fcovers\u002FArch_Amazon-Elastic-Kubernetes-Service_64.png",{"id":386,"title":387,"description":388,"slug":389,"coverImageUrl":390},73,"Amazon API Gateway","Amazon API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale, providing a way to facilitate communication between software applications through web services.","amazon-api-gateway","\u002Fimages\u002Fprovider-services\u002Famazon-api-gateway\u002Fcovers\u002FArch_Amazon-API-Gateway_64.png",{"id":392,"title":393,"description":394,"slug":395,"coverImageUrl":396},88,"AWS Auto Scaling","AWS Auto Scaling is a service provided by Amazon Web Services that automatically adjusts the number of computing resources in response to demand, ensuring that your application maintains consistent performance at the lowest possible cost.","aws-auto-scaling","\u002Fimages\u002Fprovider-services\u002Faws-auto-scaling\u002Fcovers\u002FArch_AWS-Auto-Scaling_64.png",{"id":398,"title":399,"description":400,"slug":401,"coverImageUrl":402},92,"AWS CloudFormation","AWS CloudFormation is a service that enables users to model, provision, and manage AWS and third-party application resources in a safe, repeatable, and efficient manner using templates.","aws-cloudformation","\u002Fimages\u002Fprovider-services\u002Faws-cloudformation\u002Fcovers\u002FArch_AWS-CloudFormation_64.png",{"id":404,"title":405,"description":406,"slug":407,"coverImageUrl":408},93,"AWS CloudTrail","AWS CloudTrail is a service that provides a comprehensive log of user activity and API usage across the AWS infrastructure, enabling security monitoring, compliance auditing, and operational troubleshooting.","aws-cloudtrail","\u002Fimages\u002Fprovider-services\u002Faws-cloudtrail\u002Fcovers\u002FArch_AWS-CloudTrail_64.png",{"id":410,"title":411,"description":412,"slug":413,"coverImageUrl":414},95,"Amazon CloudWatch","Amazon CloudWatch is a monitoring and observability service offered by Amazon Web Services (AWS) that provides data and actionable insights to monitor applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health.","amazon-cloudwatch","\u002Fimages\u002Fprovider-services\u002Famazon-cloudwatch\u002Fcovers\u002FArch_Amazon-CloudWatch_64.png",{"id":416,"title":417,"description":418,"slug":419,"coverImageUrl":420},96,"AWS Command Line Interface (AWS CLI)","The AWS Command Line Interface (AWS CLI) is a unified tool that allows you to manage and automate AWS services directly from the terminal or command prompt.","aws-command-line-interface-(aws-cli)","\u002Fimages\u002Fprovider-services\u002Faws-command-line-interface-(aws-cli)\u002Fcovers\u002FArch_AWS-Command-Line-Interface_64.png",{"id":422,"title":423,"description":424,"slug":425,"coverImageUrl":426},98,"AWS Config","AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources, providing a detailed view of their compliance with the configurations specified by your internal guidelines and regulatory standards.","aws-config","\u002Fimages\u002Fprovider-services\u002Faws-config\u002Fcovers\u002FArch_AWS-Config_64.png",{"id":428,"title":429,"description":430,"slug":431,"coverImageUrl":432},99,"AWS Control Tower","AWS Control Tower is a cloud service that automatically sets up and governs a secure, multi-account AWS environment based on best practices established through AWS’s experience working with thousands of enterprises.","aws-control-tower","\u002Fimages\u002Fprovider-services\u002Faws-control-tower\u002Fcovers\u002FArch_AWS-Control-Tower_64.png",{"id":434,"title":435,"description":436,"slug":437,"coverImageUrl":438},100,"AWS Health Dashboard","The AWS Health Dashboard is a service provided by Amazon Web Services that shows the current status of AWS services and alerts to any operational issues or scheduled maintenance events affecting the user's resources.","aws-health-dashboard","\u002Fimages\u002Fprovider-services\u002Faws-health-dashboard\u002Fcovers\u002FArch_AWS-Health-Dashboard_64.png",{"id":440,"title":441,"description":442,"slug":443,"coverImageUrl":444},107,"AWS Management Console","The AWS Management Console is a web-based interface that allows users to access and manage Amazon Web Services (AWS) and its resources, offering an intuitive and easy-to-navigate user experience for configuring AWS services, monitoring their performance, and managing billing and security.","aws-management-console","\u002Fimages\u002Fprovider-services\u002Faws-management-console\u002Fcovers\u002FArch_AWS-Management-Console_64.png",{"id":164,"title":446,"description":447,"slug":448,"coverImageUrl":449},"AWS Organizations","AWS Organizations is a cloud service from Amazon Web Services that allows you to centrally manage and govern your environment as you scale your AWS resources across multiple accounts.","aws-organizations","\u002Fimages\u002Fprovider-services\u002Faws-organizations\u002Fcovers\u002FArch_AWS-Organizations_64.png",{"id":451,"title":452,"description":453,"slug":454,"coverImageUrl":455},113,"AWS Trusted Advisor","AWS Trusted Advisor is an online tool that helps users optimize their Amazon Web Services (AWS) infrastructure for cost, performance, security, and fault tolerance by evaluating their environment and offering recommendations based on best practices.","aws-trusted-advisor","\u002Fimages\u002Fprovider-services\u002Faws-trusted-advisor\u002Fcovers\u002FArch_AWS-Trusted-Advisor_64.png",{"id":457,"title":458,"description":459,"slug":460,"coverImageUrl":461},114,"AWS Well-Architected Tool","The AWS Well-Architected Tool is a cloud service provided by Amazon Web Services that offers a set of questions across six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability to help users review the state of their workloads and compare them against AWS architectural best practices.","aws-well-architected-tool","\u002Fimages\u002Fprovider-services\u002Faws-well-architected-tool\u002Fcovers\u002FArch_AWS-Well-Architected-Tool_64.png",{"id":463,"title":464,"description":465,"slug":466,"coverImageUrl":467},127,"AWS Client VPN","AWS Client VPN is a managed client-based VPN service that enables secure access to AWS resources and on-premises networks from any location.","aws-client-vpn","\u002Fimages\u002Fprovider-services\u002Faws-client-vpn\u002Fcovers\u002FArch_AWS-Client-VPN_64.png",{"id":469,"title":470,"description":471,"slug":472,"coverImageUrl":473},128,"Amazon CloudFront","Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.","amazon-cloudfront","\u002Fimages\u002Fprovider-services\u002Famazon-cloudfront\u002Fcovers\u002FArch_Amazon-CloudFront_64.png",{"id":475,"title":476,"description":477,"slug":478,"coverImageUrl":479},129,"AWS Direct Connect","AWS Direct Connect is a cloud service from Amazon Web Services that provides a dedicated network connection from an on-premises network to AWS infrastructure, allowing for reduced network costs, increased bandwidth throughput, and a more consistent network experience compared to internet-based connections.","aws-direct-connect","\u002Fimages\u002Fprovider-services\u002Faws-direct-connect\u002Fcovers\u002FArch_AWS-Direct-Connect_64.png",{"id":481,"title":482,"description":483,"slug":484,"coverImageUrl":485},130,"Elastic Load Balancing (ELB)","Elastic Load Balancing (ELB) is a service provided by Amazon Web Services (AWS) that automatically distributes incoming application traffic across multiple targets, such as EC2 instances, containers, and IP addresses, to ensure fault tolerance and scalability.","elastic-load-balancing-(elb)","\u002Fimages\u002Fprovider-services\u002Felastic-load-balancing-(elb)\u002Fcovers\u002FArch_Elastic-Load-Balancing_64.png",{"id":487,"title":488,"description":489,"slug":490,"coverImageUrl":491},131,"AWS Global Accelerator","AWS Global Accelerator is a networking service that improves an application's availability and performance by directing traffic to optimal endpoints over the AWS global network.","aws-global-accelerator","\u002Fimages\u002Fprovider-services\u002Faws-global-accelerator\u002Fcovers\u002FArch_AWS-Global-Accelerator_64.png",{"id":493,"title":494,"description":495,"slug":496,"coverImageUrl":497},132,"AWS PrivateLink","AWS PrivateLink is a networking service that allows AWS customers to securely access services across the Amazon Web Services (AWS) network in a private manner, without using public IPs or requiring the traffic to traverse the public internet.","aws-privatelink","\u002Fimages\u002Fprovider-services\u002Faws-privatelink\u002Fcovers\u002FArch_AWS-PrivateLink_64.png",{"id":499,"title":500,"description":501,"slug":502,"coverImageUrl":503},133,"Amazon Route 53","Amazon Route 53 is a scalable cloud Domain Name System (DNS) web service designed to give developers and businesses a reliable way to route end users to Internet applications by translating names like www.example.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other.","amazon-route-53","\u002Fimages\u002Fprovider-services\u002Famazon-route-53\u002Fcovers\u002FArch_Amazon-Route-53_64.png",{"id":505,"title":506,"description":507,"slug":508,"coverImageUrl":509},134,"AWS Site-to-Site VPN","AWS Site-to-Site VPN is a service that allows you to establish a secure and private connection between your on-premises network and your Amazon Virtual Private Cloud (VPC), enabling secure data transfer and remote access to your AWS resources.","aws-site-to-site-vpn","\u002Fimages\u002Fprovider-services\u002Faws-site-to-site-vpn\u002Fcovers\u002FArch_AWS-Site-to-Site-VPN_64.png",{"id":511,"title":512,"description":513,"slug":514,"coverImageUrl":515},135,"AWS Transit Gateway","AWS Transit Gateway is a service that enables customers to connect their Amazon Virtual Private Clouds (VPCs) and their on-premises networks to a single gateway, simplifying their network architecture and enabling scalable, efficient routing among thousands of VPCs, AWS accounts, and on-premises environments.","aws-transit-gateway","\u002Fimages\u002Fprovider-services\u002Faws-transit-gateway\u002Fcovers\u002FArch_AWS-Transit-Gateway_64.png",{"id":517,"title":518,"description":519,"slug":520,"coverImageUrl":521},136,"Amazon VPC","Amazon VPC (Virtual Private Cloud) is a service that allows users to launch AWS resources in a logically isolated virtual network that they can define and control, including IP address ranges, subnets, route tables, and gateways.","amazon-vpc","\u002Fimages\u002Fprovider-services\u002Famazon-vpc\u002Fcovers\u002FVirtual-private-cloud-VPC_32.png",{"id":523,"title":524,"description":525,"slug":526,"coverImageUrl":527},146,"AWS Firewall Manager","AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your Amazon Web Services (AWS) accounts and applications, simplifying your AWS network firewall administration.","aws-firewall-manager","\u002Fimages\u002Fprovider-services\u002Faws-firewall-manager\u002Fcovers\u002FArch_AWS-Firewall-Manager_64.png",{"id":529,"title":530,"description":531,"slug":532,"coverImageUrl":533},148,"AWS IAM Identity Center (AWS Single Sign-On)","AWS IAM Identity Center (formerly AWS Single Sign-On) is a cloud service that enables secure and unified authentication for users to access AWS accounts and business applications with a single set of credentials.","aws-iam-identity-center-(aws-single-sign-on)","\u002Fimages\u002Fprovider-services\u002Faws-iam-identity-center-(aws-single-sign-on)\u002Fcovers\u002FArch_AWS-IAM-Identity-Center_64.png",{"id":535,"title":536,"description":537,"slug":538,"coverImageUrl":539},153,"AWS Network Firewall","AWS Network Firewall is a managed service provided by Amazon Web Services that enables users to deploy essential network protections such as stateful firewall rules, intrusion detection and prevention, and web filtering within their Virtual Private Cloud (VPC) environments.","aws-network-firewall","\u002Fimages\u002Fprovider-services\u002Faws-network-firewall\u002Fcovers\u002FArch_AWS-Firewall-Manager_64.png",{"id":541,"title":542,"description":543,"slug":544,"coverImageUrl":545},154,"AWS Resource Access Manager (AWS RAM)","AWS Resource Access Manager (AWS RAM) is a service that enables you to easily and securely share AWS resources with any AWS account or within your AWS Organization.","aws-resource-access-manager-(aws-ram)","\u002Fimages\u002Fprovider-services\u002Faws-resource-access-manager-(aws-ram)\u002Fcovers\u002FArch_AWS-Resource-Access-Manager_64.png",{"id":547,"title":548,"description":549,"slug":550,"coverImageUrl":551},157,"AWS Shield","AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS against DDoS attacks.","aws-shield","\u002Fimages\u002Fprovider-services\u002Faws-shield\u002Fcovers\u002FArch_AWS-Shield_64.png",{"id":553,"title":554,"description":555,"slug":556,"coverImageUrl":557},158,"AWS WAF","AWS WAF (Web Application Firewall) is a web application firewall service that helps protect web applications and APIs from common web exploits and bots that may affect availability, compromise security, or consume excessive resources.","aws-waf","\u002Fimages\u002Fprovider-services\u002Faws-waf\u002Fcovers\u002FArch_AWS-WAF_64.png",{"id":559,"title":560,"description":561,"slug":562,"coverImageUrl":563},166,"AWS Fargate","AWS Fargate is a serverless compute engine for containers that allows you to run containers without having to manage servers or clusters.","aws-fargate","\u002Fimages\u002Fprovider-services\u002Faws-fargate\u002Fcovers\u002FArch_AWS-Fargate_64.png",{"id":565,"title":566,"description":567,"slug":568,"coverImageUrl":569},168,"AWS Lambda","AWS Lambda is a serverless computing service provided by Amazon Web Services that allows developers to run code in response to events without provisioning or managing servers.","aws-lambda","\u002Fimages\u002Fprovider-services\u002Faws-lambda\u002Fcovers\u002FArch_AWS-Lambda_64.png",{"id":571,"title":572,"description":573,"slug":574,"coverImageUrl":575},173,"Amazon S3","Amazon S3 (Simple Storage Service) is a scalable cloud storage service offered by Amazon Web Services (AWS) that allows users to store and retrieve any amount of data from anywhere on the web.","amazon-s3","\u002Fimages\u002Fprovider-services\u002Famazon-s3\u002Fcovers\u002FArch_Amazon-Simple-Storage-Service_64.png",{"id":577,"title":578,"description":579,"slug":580,"coverImageUrl":581},240,"AWS App Mesh","AWS App Mesh is a service mesh that provides application-level networking to standardize how your microservices communicate, offering end-to-end visibility and control for managing traffic and ensuring high availability across your applications.","aws-app-mesh","\u002Fimages\u002Fprovider-services\u002Faws-app-mesh\u002Fcovers\u002FArch_AWS-App-Mesh_64.png",{"id":583,"title":584,"description":585,"slug":586,"coverImageUrl":587},241,"AWS Cloud Map","AWS Cloud Map is a cloud resource discovery service that allows developers to define custom names for their application resources, and it keeps track of the changing locations of these dynamically changing resources, making it easier to discover and connect to them in a cloud environment.","aws-cloud-map","\u002Fimages\u002Fprovider-services\u002Faws-cloud-map\u002Fcovers\u002FArch_AWS-Cloud-Map_64.png",{"id":29,"code":119,"slug":113,"dateLastDay":152,"whatChanged":152,"pageSlug":120},[],1793320686733]