Question 490
An architect is validating an enterprise AWS migration plan, the decisive constraint is: A payment event may be delivered twice during migration and could double-charge customers. What is the most defensible implementation decision?
Explanation
Correct Answer
Implement application idempotency keys and conditional transaction updates. At-least-once messaging requires business-level deduplication of side effects.
Incorrect Answers
For the separate situation A company wants all new services to synchronously call one centralized orchestrator for simple notifications, Prefer SNS fanout or EventBridge pub-sub for independent subscriber notifications could be useful. Asynchronous fanout avoids unnecessary runtime coupling through a central synchronous service.
Introduce an SQS queue and idempotent inventory consumers solves the related scenario A monolith holds incoming orders synchronously while a slow inventory system responds; queued work absorbs dependency latency and separates acceptance from processing.
Although Assign data ownership and introduce a versioned API or events between the services can be valid when A migration extracts customer profiles into a new service but shared database tables cause accidental cross-service writes, it targets a different technical condition. Service isolation requires explicit state ownership rather than shared mutable tables.