Clarification on SA Pro Question

[AndreaCoda]

The correct answer to the question:

“Your startup company is building a web app that lets users post photos of good deeds in their neighborhood with a 143-character caption/article. You decided to write the application in ReactJS, a popular javascript framework, so that it would run on the broadest range of browsers, mobile phones, and tablets. Your app should provide access to Amazon DynamoDB to store the caption. The initial prototype shows that there aren’t large spikes in usage.

Which option provides the most cost-effective and scalable architecture for this application?”

is:

“Register the web application with a Web Identity Provider such as Google, Facebook, Amazon or from any other popular social sites and use the AssumeRoleWithWebIdentity API of STS to generate temporary credentials. Create an IAM role for that web provider and set up permissions for the IAM role to allow GET operations in S3 and PUT operations in DynamoDB. Serve your web app out of an S3 bucket enabled as a website.”

I have 2 questions:

1) How do we know the web app is static, hence allowing hosting on S3?

2) If the associated IAM role has only GET permission to the S3 bucket, how will the app be able to store the pictures in S3?

Thanks in advance,

Andrea

[Carlo-TutorialsDojo]

Hello Andrea,

Thank you for bringing up this item to our attention.

How do we know the web app is static, hence allowing hosting on S3?

>> Based on the available information, the web app can be treated as static because we don’t have to create and host our own backend servers. Backend processes such as logging in and storing data to a database are already offloaded to AWS Services (DynamoDB, Cognito) — which are both callable via APIs. ReactJS is just a framework. We can just host the “frontend” part of our app on Amazon S3.

If the associated IAM role has only GET permission to the S3 bucket, how will the app be able to store the pictures in S3?

>> Thank you for pointing this out. Both Amazon S3 and DynamoDB should be given access so users can upload and view the pictures/captions. We will correct this item.

Regards,

Carlo

[AndreaCoda]

Makes sense Carlo, thank you for your feedback.

Best regards,

Andrea

[Carlo-TutorialsDojo]

Glad to help, Andrea.

Regards,

Carlo