An enterprise is planning to deploy and manage a multi-tier web application across multiple AWS environments including development, testing, and production. The operations team requires a method that enables them to define the entire infrastructure configuration as code, track changes in a centralized version control repository, perform peer reviews on configuration updates, and automatically detect when resources have been manually altered outside of the deployment pipeline. Which AWS service or tool should the team use to meet these requirements?
- AWS CloudFormationCevap
- BAWS Command Line Interface (CLI)
- CAWS Software Development Kit (SDK)
- DAWS Management Console
Cevap
AWS CloudFormation
AWS CloudFormation is the correct option because it is designed specifically for Infrastructure as Code (IaC). It uses declarative templates to provision resources in a consistent, repeatable manner across development, test, and production environments. Because these templates are files (YAML or JSON), they can be checked into a version control system like Git, enabling team members to conduct code reviews on infrastructure changes. Furthermore, CloudFormation includes a native Drift Detection feature that identifies when resources in a stack have been modified outside of the CloudFormation template, meeting the requirement to detect manual alterations.
Adım Adım Çözüm
Anahtar Kavram
Infrastructure as Code and drift detection using AWS CloudFormation compared to manual or programmatic scripting methods.