SAA-C03 Q433 · DNS

Question

A company runs a workload in an AWS Region. Users connect to the workload by using an Amazon API Gateway REST API. The company uses Amazon Route 53 as its DNS provider and has created a Route 53 Hosted Zone. The company wants to provide unique and secure URLs for all workload users. Which combination of steps will meet these requirements with the MOST operational efficiency? (Select THREE)

Accepted Answer

The question has three requirements: (1) unique URLs for each user, (2) secure (HTTPS), and (3) most operationally efficient.

**Step D — ACM wildcard certificate in the same Region:**
For a Regional API Gateway REST API, the ACM certificate **must be in the same Region** as the API Gateway. A wildcard certificate (e.g., `*.example.com`) covers all subdomains like `user1.example.com`, `user2.example.com`, etc. This is the foundation for secure HTTPS.

**Step F — Create a custom domain name in API Gateway and import the ACM certificate:**
API Gateway's custom domain name feature lets you map a friendly domain (e.g., `*.example.com`) to your REST API. When you create the custom domain, you associate the ACM wildcard certificate with it. This enables HTTPS termination at the API Gateway level

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips