Answer: C

An IAM role is an IAM entity that defines a set of permissions for making AWS service requests.

IAM roles are not associated with a specific user or group.

Instead, trusted entities assume roles, such as IAM users, applications, or AWS services such as EC2

Reference:

https://aws.amazon.com/premiumsupport/knowledge-center/ec2-ri-basics/

Answer: B

For billing purposes, the consolidated billing feature of AWS Organizations treats all the accounts in the organization as one account.

This means that all accounts in the organization can receive the hourly cost benefit of Reserved Instances that are purchased by any other account.

https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/ri-behavior.html

The Correct answer is B.

Each time you start a stopped instance we charge a minimum of one minute for usage.

After one minute, we charge only for the seconds you use.

For example, if you run an instance for 20 seconds and then stop it, we charge for a full one minute.

If you run an instance for 3 minutes and 40 seconds, we charge for exactly 3 minutes and 40 seconds of usage.

Here is a full list of Compute Services..

https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html

Amazon EC2

Amazon EC2 Auto Scaling

Amazon Elastic Container Registry

Amazon Elastic Container Service

Amazon Elastic Kubernetes Service

Amazon Lightsail

AWS Batch

AWS Elastic Beanstalk

AWS Fargate

AWS Lambda

AWS Serverless Application Repository

AWS Outposts

VMware Cloud on AWS

AWS CloudFormation provides a common language for you to model and provision AWS and third party application resources in your cloud environment.

AWS CloudFormation allows you to use programming languages or a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts.

This gives you a single source of truth for your AWS and third party resources.

Reference:

https://aws.amazon.com/cloudformation/

Correct Answers: B, D

Reference:

https://aws.amazon.com/hybrid/

The key is dedicated network => The answer is B.

How you should differentiate between Direct Connect & AWS VPN :

A physical dedicated line between on-premises & AWS : Direct Connect

A secured connection between on premises & AWS over the internet : AWS VPN

It is A and B (Shield).

Shield is integrated with CloudFront.

AWS shield and shield advanced are available at edge locations worldwide:

https://aws.amazon.com/shield/faqs/

B.

Hybrid architecture may include VPC and VPC has to rely on something else to get connected to the on-premises data.

That connectivity can be realized by VPN or Direct Connect.

See more at https://www.coresite.com/blog/vpn-or-direct-connect-aws-compared.

"With established connectivity via AWS Direct Connect, you can access your Amazon VPC and all AWS services."