DevOps Engineer Professional (Page 27)

A company manages AWS accounts in AWS Organizations.The company needs a solution to send Amazon CloudWatch Logs data to an Amazon S3 bucket in a dedicated AWS account.The solution must support all existing and future CloudWatch Logs log groups.Which solution will meet these requirements?Read More →

A company uses AWS Organizations to manage its AWS accounts.The organization root has a child OU that is named Department.The Department OU has a child OU that is named Engineering.The default FullAWSAccess policy is attached to the root, the Department OU, and the Engineering OU.The company has many AWS accounts in the Engineering OU.Each account has an administrative IAM role with the AdministratorAccess IAM policy attached.The default FullAWSAccessPolicy is also attached to each account.A DevOps engineer plans to remove the FullAWSAccess policy from the Department OU.The DevOps engineer will replace the policy with a policy that contains an Allow statement for all Amazon EC2 API operations.What will happen to the permissions of the administrative 1AM roles as a result of this change?Read More →

A company has a single developer writing code for an automated deployment pipeline.The developer is storing source code in an Amazon S3 bucket for each project.The company wants to add more developers to the team but is concerned about code conflicts and lost work.The company also wants to build a test environment to deploy newer versions of code for testing and allow developers to automatically deploy to both environments when code is changed in the repository.What is the MOST efficient way to meet these requirements?Read More →

A company is using AWS Organizations to create separate AWS accounts for each of its departments.The company needs to automate the following tasks:• Update the Linux AMIs with new patches periodically and generate a golden image• Install a new version of Chef agents in the golden image, if available• Provide the newly generated AMIs to the department’s accountsWhich solution meets these requirements with the LEAST management overhead?Read More →

A company is building a web and mobile application that uses a serverless architecture powered by AWS Lambda and Amazon API Gateway.The company wants to fully automate the backend Lambda deployment based on code that is pushed to the appropriate environment branch in an AWS CodeCommit repository.The deployment must have the following:• Separate environment pipelines for testing and production• Automatic deployment that occurs for test environments onlyWhich steps should be taken to meet these requirements?Read More →

A company has microservices running in AWS Lambda that read data from Amazon DynamoDB.The Lambda code is manually deployed by developers after successful testing.The company now needs the tests and deployments be automated and run in the cloud.Additionally, traffic to the new versions of each microservice should be incrementally shifted over time after deployment.What solution meets all the requirements, ensuring the MOST developer velocity?Read More →

A company’s application is currently deployed to a single AWS Region.Recently, the company opened a new office on a different continent.The users in the new office are experiencing high latency.The company’s application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) and uses Amazon DynamoDB as the database layer.The instances run in an EC2 Auto Scaling group across multiple Availability Zones.A DevOps engineer is tasked with minimizing application response times and improving availability for users in both Regions.Which combination of actions should be taken to address the latency issues? (Choose three.)Read More →

A company uses a series of individual Amazon CloudFormation templates to deploy its multi-Region applications.These templates must be deployed in a specific order.The company is making more changes to the templates than previously expected and wants to deploy new templates more efficiently.Additionally, the data engineering team must be notified of all changes to the templates.What should the company do to accomplish these goals?Read More →

The security team depends on AWS CloudTrail to detect sensitive security issues in the company’s AWS account.The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off in an AWS account.What solution ensures the LEAST amount of downtime for the CloudTrail log deliveries?Read More →

A DevOps engineer at a company is supporting an AWS environment in which all users use AWS IAM Identity Center (AWS Single Sign-On).The company wants to immediately disable credentials of any new IAM user and wants the security team to receive a notification.Which combination of steps should the DevOps engineer take to meet these requirements? (Choose three.)Read More →