DevOps Engineer Professional (Page 21)

A company deploys updates to its Amazon API Gateway API several times a week by using an AWS CodePipeline pipeline.As part of the update process, the company exports the JavaScript SDK for the API from the API Gateway console and uploads the SDK to an Amazon S3 bucket.The company has configured an Amazon CloudFront distribution that uses the S3 bucket as an origin.Web clients then download the SDK by using the CloudFront distribution’s endpoint.A DevOps engineer needs to implement a solution to make the new SDK available automatically during new API deployments.Which solution will meet these requirements?Read More →

A business has an application that consists of five independent AWS Lambda functions.The DevOps engineer has built a CI/CD pipeline using AWS CodePipeline and AWS CodeBuild that builds, tests, packages, and deploys each Lambda function in sequence.The pipeline uses an Amazon EventBridge rule to ensure the pipeline starts as quickly as possible after a change is made to the application source code.After working with the pipeline for a few months, the DevOps engineer has noticed the pipeline takes too long to complete.What should the DevOps engineer implement to BEST improve the speed of the pipeline?Read More →

A DevOps engineer has developed an AWS Lambda function.The Lambda function starts an AWS CloudFormation drift detection operation on all supported resources for a specific CloudFormation stack.The Lambda function then exits its invocation.The DevOps engineer has created an Amazon EventBridge scheduled rule that invokes the Lambda function every hour.An Amazon Simple Notification Service (Amazon SNS) topic already exists in the AWS account.The DevOps engineer has subscribed to the SNS topic to receive notifications.The DevOps engineer needs to receive a notification as soon as possible when drift is detected in this specific stack configuration.Which solution will meet these requirements?Read More →

A company wants to set up a continuous delivery pipeline.The company stores application code in a private GitHub repository.The company needs to deploy the application components to Amazon Elastic Container Service (Amazon ECS).Amazon EC2, and AWS Lambda.The pipeline must support manual approval actions.Which solution will meet these requirements?Read More →

A company runs an application for multiple environments in a single AWS account.An AWS CodePipeline pipeline uses a development Amazon Elastic Container Service (Amazon ECS) cluster to test an image for the application from an Amazon Elastic Container Registry (Amazon ECR) repository.The pipeline promotes the image to a production ECS cluster.The company needs to move the production cluster into a separate AWS account in the same AWS Region.The production cluster must be able to download the images over a private connection.Which solution will meet these requirements?Read More →

A DevOps engineer is building a multistage pipeline with AWS CodePipeline to build, verify, stage, test, and deploy an application.A manual approval stage is required between the test stage and the deploy stage.The development team uses a custom chat tool with webhook support that requires near-real-time notifications.How should the DevOps engineer configure status updates for pipeline activity and approval requests to post to the chat tool?Read More →

A company uses AWS Organizations to manage multiple accounts.Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant.A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present.Which solution will accomplish this?Read More →

A company has multiple accounts in an organization in AWS Organizations.The company’s SecOps team needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if any account in the organization turns off the Block Public Access feature on an Amazon S3 bucket.A DevOps engineer must implement this change without affecting the operation of any AWS accounts.The implementation must ensure that individual member accounts in the organization cannot turn off the notification.Which solution will meet these requirements?Read More →

A DevOps engineer is deploying a new version of a company’s application in an AWS CodeDeploy deployment group associated with its Amazon EC2 instances.After some time, the deployment fails.The engineer realizes that all the events associated with the specific deployment ID are in a Skipped status, and code was not deployed in the instances associated with the deployment group.What are valid reasons for this failure? (Choose two.)Read More →

A company wants to ensure that their EC2 instances are secure.They want to be notified if any new vulnerabilities are discovered on their instances, and they also want an audit trail of all login activities on the instances.Which solution will meet these requirements?Read More →