DevOps Engineer Professional (Page 15)

A company is building a web and mobile application that uses a serverless architecture powered by AWS Lambda and Amazon API Gateway.The company wants to fully automate the backend Lambda deployment based on code that is pushed to the appropriate environment branch in an AWS CodeCommit repository.The deployment must have the following:• Separate environment pipelines for testing and production• Automatic deployment that occurs for test environments onlyWhich steps should be taken to meet these requirements?Read More →

A company wants to migrate a legacy application to AWS and develop a deployment pipeline that uses AWS services only.A DevOps engineer is migrating all of the application code from a Git repository to AWS CodeCommit while preserving the history of the repository.The DevOps engineer has set all the permissions within CodeCommit, installed the Git client and the AWS CLI on a local computer, and is ready to migrate the repository.Which actions will follow?Read More →

A company has multiple development groups working in a single shared AWS account.The senior manager of the groups wants to be alerted via a third-party API call when the creation of resources approaches the service limits for the account.Which solution will accomplish this with the LEAST amount of development effort?Read More →

A DevOps engineer is deploying an AWS Service Catalog portfolio using AWS CodePipeline.The pipeline should create products and templates based on a manifest file in either JSON or YAML, and should enforce security requirements on all AWS Service Catalog products managed through the pipeline.Which solution will meet the requirements in an automated fashion?Read More →

A DevOps engineer is setting up a container-based architecture.The engineer has decided to use AWS CloudFormation to automatically provision an Amazon ECS cluster and an Amazon EC2 Auto Scaling group to launch the EC2 container instances.After successfully creating the CloudFormation stack, the engineer noticed that, even though the ECS cluster and the EC2 instances were created successfully and the stack finished the creation, the EC2 instances were associating with a different cluster.How should the DevOps engineer update the CloudFormation template to resolve this issue?Read More →

A company’s DevOps engineer is working in a multi-account environment.The company uses AWS Transit Gateway to route all outbound traffic through a network operations account.In the network operations account, all account traffic passes through a firewall appliance for inspection before the traffic goes to an internet gateway.The firewall appliance sends logs to Amazon CloudWatch Logs and includes event severities of CRITICAL, HIGH, MEDIUM, LOW, and INFO.The security team wants to receive an alert if any CRITICAL events occur.What should the DevOps engineer do to meet these requirements?Read More →

A company has configured an Amazon S3 event source on an AWS Lambda function.The company needs the Lambda function to run when a new object is created or an existing object is modified in a particular S3 bucket.The Lambda function will use the S3 bucket name and the S3 object key of the incoming event to read the contents of the created or modified S3 object.The Lambda function will parse the contents and save the parsed contents to an Amazon DynamoDB table.The Lambda function’s execution role has permissions to read from the S3 bucket and to write to the DynamoDB table.During testing, a DevOps engineer discovers that the Lambda function does not run when objects are added to the S3 bucket or when existing objects are modified.Which solution will resolve this problem?Read More →

An application has microservices spread across different AWS accounts and is integrated with an on-premises legacy system for some of its functionality.Because of the segmented architecture and missing logs, every time the application experiences issues, it is taking too long to gather the logs to identify the issues.A DevOps Engineer must fix the log aggregation process and provide a way to centrally analyze the logs.Which is the MOST efficient and cost-effective solution?Read More →

A company deploys a web application on Amazon EC2 instances that are behind an Application Load Balancer (ALB).The company stores the application code in an AWS CodeCommit repository.When code is merged to the main branch, an AWS Lambda function invokes an AWS CodeBuild project.The CodeBuild project packages the code, stores the packaged code in AWS CodeArtifact, and invokes AWS Systems Manager Run Command to deploy the packaged code to the EC2 instances.Previous deployments have resulted in defects, EC2 instances that are not running the latest version of the packaged code, and inconsistencies between instances.Which combination of actions should a DevOps engineer take to implement a more reliable deployment solution? (Choose two.)Read More →

A DevOps engineer needs to grant several external contractors access to a legacy application that runs on an Amazon Linux Amazon EC2 instance.The application server is available only in a private subnet.The contractors are not authorized for VPN access.What should the DevOps engineer do to grant the contactors access to the application server?Read More →