DevOps Engineer Professional (Page 4)

An Amazon EC2 instance is running in a VPC and needs to download an object from a restricted Amazon S3 bucket.When the DevOps engineer tries to download the object, an AccessDenied error is received.What are the possible causes for this error? (Choose two.)Read More →

A company has multiple member accounts that are part of an organization in AWS Organizations.The security team needs to review every Amazon EC2 security group and their inbound and outbound rules.The security team wants to programmatically retrieve this information from the member accounts using an AWS Lambda function in the management account of the organization.Which combination of access changes will meet these requirements? (Choose three.)Read More →

A company’s organization in AWS Organizations has a single OU.The company runs Amazon EC2 instances in the OU accounts.The company needs to limit the use of each EC2 instance’s credentials to the specific EC2 instance that the credential is assigned to.A DevOps engineer must configure security for the EC2 instances.Which solution will meet these requirements?Read More →

A company is examining its disaster recovery capability and wants the ability to switch over its daily operations to a secondary AWS Region.The company uses AWS CodeCommit as a source control tool in the primary Region.A DevOps engineer must provide the capability for the company to develop code in the secondary Region.If the company needs to use the secondary Region, developers can add an additional remote URL to their local Git configuration.Which solution will meet these requirements?Read More →

A software team is using AWS CodePipeline to automate its Java application release pipeline.The pipeline consists of a source stage, then a build stage, and then a deploy stage.Each stage contains a single action that has a runOrder value of 1.The team wants to integrate unit tests into the existing release pipeline.The team needs a solution that deploys only the code changes that pass all unit tests.Which solution will meet these requirements?Read More →

A company is refactoring applications to use AWS.The company identifies an internal web application that needs to make Amazon S3 API calls in a specific AWS account.The company wants to use its existing identity provider (IdP) auth.company.com for authentication.The IdP supports only OpenID Connect (OIDC).A DevOps engineer needs to secure the web application’s access to the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has an AWS CodeDeploy application.The application has a deployment group that uses a single tag group to identify instances for the deployment of Application.The single tag group configuration identifies instances that have Environment=Production and Name=ApplicationA tags for the deployment of ApplicationA.The company launches an additional Amazon EC2 instance with Department=Marketing, Environment=Production, and Name=ApplicationB tags.On the next CodeDeploy deployment of Application, the additional instance has ApplicationA installed on it.A DevOps engineer needs to configure the existing deployment group to prevent ApplicationA from being installed on the additional instance.Which solution will meet these requirements?Read More →

A DevOps engineer is architecting a continuous development strategy for a company’s software as a service (SaaS) web application running on AWS.For application and security reasons, users subscribing to this application are distributed across multiple Application Load Balancers (ALBs), each of which has a dedicated Auto Scaling group and fleet of Amazon EC2 instances.The application does not require a build stage, and when it is committed to AWS CodeCommit, the application must trigger a simultaneous deployment to all ALBs, Auto Scaling groups, and EC2 fleets.Which architecture will meet these requirements with the LEAST amount of configuration?Read More →

A company has a fleet of Amazon EC2 instances that run Linux in a single AWS account.The company is using an AWS Systems Manager Automation task across the EC2 instances.During the most recent patch cycle, several EC2 instances went into an error state because of insufficient available disk space.A DevOps engineer needs to ensure that the EC2 instances have sufficient available disk space during the patching process in the future.Which combination of steps will meet these requirements? (Choose two.)Read More →

A DevOps engineer manages a company’s Amazon Elastic Container Service (Amazon ECS) cluster.The cluster runs on several Amazon EC2 instances that are in an Auto Scaling group.The DevOps engineer must implement a solution that logs and reviews all stopped tasks for errors.Which solution will meet these requirements?Read More →