A facility has badge readers at every entrance. When badges are scanned, readers send a message over HTTPS indicating who attempted to access that entrance. A solutions architect must design a highly available system to process these messages and make results available for the security team to analyze. Which architecture should the solutions architect recommend?

The correct option leverages a serverless architecture that is highly available, scalable, and cost-effective. Amazon API Gateway provides a fully managed, scalable HTTPS endpoint. AWS Lambda processes messages without requiring server management, automatically scaling to handle varying loads. Amazon DynamoDB is a fully managed, highly available NoSQL database that offers single-digit millisecond performance at any scale, ideal for storing and retrieving results for analysis. The incorrect options have significant drawbacks: Using a single Amazon EC2 instance creates a single point of failure and requires manual scaling and management, failing to meet high availability requirements. Amazon Route 53 is a DNS service and cannot directly receive HTTPS messages or invoke Lambda functions in this manner; it resolves domain names to IP addresses. While a gateway VPC endpoint for Amazon S3 allows private access to S3, it doesn't provide an HTTPS endpoint for receiving messages from external sources directly. A Site-to-Site VPN adds complexity and doesn't offer a direct, scalable message processing solution.