SAP-C02 Question #584: Real Exam Question with Answer & Explanation

Question

A company is deploying a new API to AWS. The API uses Amazon API Gateway with a Regional API endpoint and an AWS Lambda function for hosting. The API retrieves data from an external vendor API, stores data in an Amazon DynamoDB global table, and retrieves data from the DynamoDB global table The API key for the vendor's API is stored in AWS Secrets Manager and is encrypted with a customer managed key in AWS Key Management Service (AWS KMS). The company has deployed its own API into a single AWS Region. A solutions architect needs to change the API components of the company's API to ensure that the components can run across multiple Regions in an active-active configuration. Which combination of changes will meet this requirement with the LEAST operational overhead? (Choose three.)

Options

• ADeploy the API to multiple Regions. Configure Amazon Route 53 with custom domain names that
• BCreate a new KMS multi-Region customer managed key. Create a new KMS customer managed
• CReplicate the existing Secrets Manager secret to other Regions. For each in-scope Region's
• DCreate a new AWS managed KMS key in each in-scope Region. Convert an existing key to a
• ECreate a new Secrets Manager secret in each in-scope Region. Copy the secret value from the
• FModify the deployment process for the Lambda function to repeat the deployment across in-scope