Examkin

Question

Difficulty: EasyCloudWatch Metrics and Alarms

A SysOps Administrator is setting up an automated remediation workflow to stop an Amazon EC2 instance when its CPU utilization exceeds 90%. The administrator needs the instance's CPU metric to be evaluated at 1-minute intervals to ensure rapid response, and wants to execute a custom Systems Manager Automation runbook as the remediation action. Which configuration will meet these requirements?

  1. A
    Keep standard monitoring enabled on the EC2 instance. Configure the CloudWatch alarm with a 1-minute period and set the alarm to trigger an Amazon EventBridge rule that executes the Systems Manager Automation runbook.
  2. Enable detailed monitoring on the EC2 instance. Configure the CloudWatch alarm with a 1-minute period and set the alarm to trigger an Amazon EventBridge rule that executes the Systems Manager Automation runbook.Answer
  3. C
    Enable detailed monitoring on the EC2 instance. Configure the CloudWatch alarm to deliver the state change event directly to an Amazon Simple Storage Service (Amazon S3) bucket to initiate the Systems Manager Automation runbook.
  4. D
    Keep standard monitoring enabled on the EC2 instance. Configure the CloudWatch alarm to publish to an Amazon Simple Queue Service (Amazon SQS) queue that directly triggers the Systems Manager Automation runbook.

Answer

Enable detailed monitoring on the EC2 instance, configure the CloudWatch alarm with a 1-minute period, and set the alarm to trigger an Amazon EventBridge rule that executes the Systems Manager Automation runbook.
To evaluate a metric at 1-minute intervals, detailed monitoring must be enabled on the EC2 instance. Once enabled, the CPU utilization metric is delivered to CloudWatch every minute. The CloudWatch alarm can then be configured with a 1-minute period. To trigger the automated remediation runbook, EventBridge should be used as it natively receives CloudWatch alarm state change events and can target Systems Manager Automation runbooks.

Step-by-Step Solution

1
Determine the necessary metric reporting frequency for a 1-minute alarm evaluation period.
Detailed monitoring must be enabled on the EC2 instance.
By default, standard monitoring for EC2 instances only sends metrics every 5 minutes. To monitor and alarm at 1-minute intervals, detailed monitoring must be enabled to report at 1-minute granularity.
2
Identify the correct destination path to execute a Systems Manager Automation runbook when the alarm changes state.
Configure a CloudWatch alarm to send state changes to EventBridge, which targets the Systems Manager Automation runbook.
CloudWatch alarms cannot invoke Systems Manager Automation runbooks directly. Instead, the alarm state change event is intercepted by Amazon EventBridge, which is configured with a rule to target the SSM Automation runbook.

Key Concept

CloudWatch Detailed Monitoring intervals and automated remediation routing via EventBridge
Rate this question

Topics

CloudWatch Metrics and Alarms

More questions from this topic