Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 73 discussion

The correct solution is C. Set up AWS IoT Core. For each device, create a corresponding AWS IoT thing and provision a certificate. Connect each device to AWS IoT Core. AWS IoT Core is a fully managed service that enables secure, bi-directional communication between internet-connected devices and the AWS Cloud. It supports the MQTT protocol and includes built-in device authentication and access control. By using AWS IoT Core, the company can easily provision and manage the X.509 certificates for each device, and connect the devices to the service with minimal operational overhead.

To support thousands of devices with real-time MQTT communication and X.509 certificate authentication with the least operational overhead, use AWS IoT Core. It is purpose-built for scalable device communication, handles certificate-based auth natively, and is fully managed—no need to manage infrastructure or scale brokers manually.

AWS IoT Core: This service is specifically designed for managing IoT devices and supports the MQTT protocol natively. It provides built-in support for device authentication using X.509 certificates.

C, use IoT Core

Option C is the most suitable solution as AWS IoT Core is specifically designed for IoT scenarios, including device management and secure communication. AWS IoT Core natively supports MQTT, a lightweight communication protocol ideal for IoT devices. It allows devices to connect securely with an individual X.509 certificate for authentication, significantly reducing operational overhead compared to managing a custom MQTT broker or other intermediate services. AWS IoT Core also simplifies device management and scaling, making it the best choice for the described use case.

I don’t like C, but C might be the preferred answer. There are thousands of devices. If C is the real answer, there should be a way to automatically create IOT thing and provision certificate. The answer seems implying to create IOT thing and provision certificates manually. If IoT core doesn’t have this automation feature, this definitely is not the right answer in real life. If there is this automation way and the question designer is expecting the exam taker to know this detail, that might be too specific for the exam takers. D is ugly, and usually is not a correct answer in most question designs. But it provides a feasible way in the real life comparing with C.

it's C

I choose C

https://docs.aws.amazon.com/iot/latest/developerguide/attach-to-cert.html It is C, - you have to do this through IOT core, for the devices you need an AWS IOT "thing" and then provision a certificate for the thing. from there connect the device.

-The AWS IoT Device SDKs support device communications using the MQTT -Device connections to AWS IoT use X.509 client certificates https://docs.aws.amazon.com/iot/latest/developerguide/iot-connect-devices.html

C is correct (less op overhead than A)

C is correct