SAP-C02 Question 291
Single answerYour organization runs a multi-region web application using Amazon Elastic Load Balancers (ALBs) and Auto Scaling groups. Recently, a new feature rollout caused a significant spike in traffic, resulting in API rate-limiting errors from AWS. Upon investigation, you discover that the number of security group rules is rapidly approaching the service quota for your AWS account. What is the most appropriate way to address this issue while ensuring minimal disruption to your application?
- A
Request a quota increase for security group rules per security group in the AWS Management Console.
- B
Modify the application to use fewer security group rules by consolidating them.
- C
Create additional security groups and distribute the rules across them to avoid hitting the limit.
- D
Switch to a different AWS region with higher default limits for security group rules.
Show answer and explanation
Correct answer: A
Explanation
When you encounter a service quota limit, the first and most effective solution is to request a quota increase from AWS. This approach minimizes disruption to your application and avoids the need for complex architectural or operational changes. AWS provides a straightforward process for requesting quota increases through the Service Quotas console or the AWS Support Center.
- A. Correct.
Requesting a quota increase is the most appropriate solution in this scenario because it directly addresses the issue without requiring application changes or service disruption. AWS allows you to request increased limits for many quotas, including those for security group rules.
- B. Incorrect.
While reducing the number of security group rules could work, it would require significant modifications to the application, which could be complex and time-consuming. This approach is not ideal for resolving the issue quickly.
- C. Incorrect.
Creating additional security groups might help in some cases, but it does not address the root cause of the quota issue. Additionally, there are limits on the number of security groups per instance, which could lead to further complications.
- D. Incorrect.
Switching to a different AWS region does not solve the problem because default limits for security group rules are the same across regions. Moreover, migrating applications between regions can be highly disruptive and impractical in this scenario.