Soru

Zorluk: Çok zorMethods of Deploying and Operating in AWS

An enterprise is planning to deploy and manage a multi-tier web application across multiple AWS environments including development, testing, and production. The operations team requires a method that enables them to define the entire infrastructure configuration as code, track changes in a centralized version control repository, perform peer reviews on configuration updates, and automatically detect when resources have been manually altered outside of the deployment pipeline. Which AWS service or tool should the team use to meet these requirements?

  1. AWS CloudFormationCevap
  2. B
    AWS Command Line Interface (CLI)
  3. C
    AWS Software Development Kit (SDK)
  4. D
    AWS Management Console

Cevap

AWS CloudFormation
AWS CloudFormation is the correct option because it is designed specifically for Infrastructure as Code (IaC). It uses declarative templates to provision resources in a consistent, repeatable manner across development, test, and production environments. Because these templates are files (YAML or JSON), they can be checked into a version control system like Git, enabling team members to conduct code reviews on infrastructure changes. Furthermore, CloudFormation includes a native Drift Detection feature that identifies when resources in a stack have been modified outside of the CloudFormation template, meeting the requirement to detect manual alterations.

Adım Adım Çözüm

1
Analyze the business and technical requirements of the scenario.
The scenario requires defining infrastructure as code (IaC), version control integration, peer review processes, multi-environment consistency, and automated detection of manual changes (configuration drift).
This establishes the criteria for evaluating the available AWS deployment and operating methods.
2
Evaluate the capabilities of AWS CloudFormation against the criteria.
AWS CloudFormation allows declarative templates (JSON or YAML) to be versioned in Git, supports peer review workflows, ensures consistent environment replication, and features native Drift Detection.
CloudFormation is the primary AWS service purpose-built for provisioning infrastructure resources using code.
3
Evaluate the other options (AWS CLI, AWS SDK, and AWS Management Console).
The AWS CLI and SDK are imperative tools that require custom scripting or programming to manage state and lack native drift detection. The AWS Management Console is web-based and manual, which fails the automation and version control requirements.
Identifying the limitations of alternative interfaces confirms that declarative IaC is the correct architectural choice.
4
Synthesize the evaluation to select the best option.
AWS CloudFormation is the only solution that natively satisfies all the requirements of declarative infrastructure as code, multi-account consistency, and automatic drift detection.
A complete matching of requirements to service features yields the correct choice.

Anahtar Kavram

Infrastructure as Code and drift detection using AWS CloudFormation compared to manual or programmatic scripting methods.
Bu soruyu puanla