AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company that uses AWS is building an application to transfer data to a product manufacturer. The company has its own identity provider (IdP). The company wants the IdP to authenticate application users while the users use the application to transfer data. The company must use Applicability Statement 2 (AS2) protocol.
Which solution will meet these requirements?
Other
Community
UAnonymous
A
Use AWS DataSync to transfer the data. Create an AWS Lambda function for IdP authentication.
B
Use Amazon AppFlow flows to transfer the data. Create an Amazon Elastic Container Service (Amazon ECS) task for IdP authentication.
C
Use AWS Transfer Family to transfer the data. Create an AWS Lambda function for IdP authentication.
D
Use AWS Storage Gateway to transfer the data. Create an Amazon Cognito identity pool for IdP authentication.
Explanation:
Explanation
Correct Answer: C - Use AWS Transfer Family to transfer the data. Create an AWS Lambda function for IdP authentication.
Why this is correct:
-
AWS Transfer Family natively supports the AS2 (Applicability Statement 2) protocol, which is specifically designed for secure business-to-business (B2B) data exchange. It's a managed service that supports AS2, SFTP, FTPS, and FTP protocols.
-
Custom authentication with Lambda: AWS Transfer Family supports custom authentication using AWS Lambda functions. This allows integration with the company's existing identity provider (IdP) for user authentication while using the AS2 protocol for data transfer.
-
Requirements alignment:
- AS2 protocol requirement: Only AWS Transfer Family among the options supports AS2 natively
- IdP authentication requirement: Lambda custom authentication can integrate with the company's IdP
- Data transfer requirement: AWS Transfer Family is designed for secure file transfers
Why other options are incorrect:
A. AWS DataSync:
- Does not support AS2 protocol
- Primarily designed for data migration and synchronization between storage systems
- Not suitable for B2B file transfers using AS2
B. Amazon AppFlow:
- Does not support AS2 protocol
- Designed for SaaS application data integration, not B2B file transfers
- ECS task for authentication is overly complex for this use case
D. AWS Storage Gateway:
- Does not support AS2 protocol
- Designed for hybrid cloud storage, not B2B file transfers
- Amazon Cognito is for user authentication, not IdP integration for AS2 transfers
Key AWS Services Knowledge:
- AWS Transfer Family: Managed file transfer service supporting AS2, SFTP, FTPS, FTP
- AS2 Protocol: Standard for secure B2B electronic data interchange (EDI)
- Lambda custom authentication: Allows integration with external identity providers for AWS Transfer Family
This solution provides a fully managed AS2 transfer service with the flexibility to authenticate users through the company's existing IdP using Lambda functions.
Comments
Loading comments...