Soru

Zorluk: Çok zorMethods of Deploying and Operating in AWS

An organization is seeking to optimize its deployment and administrative operations across several teams. They must address the following distinct operational requirements:

1. A developer is writing a custom Python application that runs on an Amazon EC2 instance and needs to dynamically upload log files to an Amazon S3 bucket.
2. A systems administrator needs to write a local bash script to automate the weekly termination of unutilized EC2 instances based on resource tags.
3. A cloud architect needs to define, version-control, and deploy a standardized multi-tier infrastructure environment consisting of Amazon VPC, EC2, and RDS across dev, test, and prod environments.

Which combination of AWS deployment and operating methods represents the most secure and appropriate solution to meet these requirements?

  1. The developer uses the AWS SDK (Boto3) within the Python code leveraging temporary credentials from an IAM Role attached to the EC2 instance; the systems administrator uses the AWS CLI in their bash script with credentials from a dedicated IAM User; the cloud architect uses AWS CloudFormation to declare and deploy the infrastructure using templates.Cevap
  2. B
    The developer uses the AWS CLI called via Python OS commands with the access keys of the AWS Account Root User; the systems administrator uses the AWS SDK (Boto3) configured with an IAM Role on their local terminal; the cloud architect uses AWS Elastic Beanstalk to upload JSON files representing the raw VPC network topology.
  3. C
    The developer uses the AWS SDK (Boto3) with hardcoded IAM User access keys in the source code; the systems administrator uses the AWS Management Console to manually execute the EC2 terminations weekly; the cloud architect uses AWS Elastic Beanstalk to declare, version-control, and provision the raw underlying infrastructure components.
  4. D
    The developer uses the AWS CLI configured with an IAM Role attached directly to their local machine; the systems administrator uses AWS CloudFormation to execute the weekly instance terminations; the cloud architect uses custom Python code using the AWS SDK (Boto3) to provision the RDS and VPC resources in a series of loops.

Cevap

The developer should use the AWS SDK (Boto3) within the application leveraging an IAM Role, the administrator should use the AWS CLI for the bash script, and the architect should use AWS CloudFormation for declarative infrastructure templates.
The correct option correctly maps each scenario to the proper AWS interface according to best practices: the AWS SDK is used inside the application code with an IAM Role; the AWS CLI is used for local shell scripting; and AWS CloudFormation is used as the Infrastructure as Code tool to manage templates.

Adım Adım Çözüm

1
Analyze the developer's requirement for programmatic S3 uploads within a custom Python application.
The AWS SDK (Boto3) is the standard programmatic interface for application development. For security, it should retrieve temporary credentials from an IAM Role attached to the EC2 instance, avoiding hardcoded keys.
This complies with the principle of least privilege and secure access without credential storage.
2
Analyze the systems administrator's requirement to write a local bash script for EC2 administration.
The AWS CLI is designed for interactive command-line access and scripting (such as bash). It should run under a dedicated IAM User's programmatic credentials.
The CLI is optimized for shell scripting, whereas the SDK is meant for application code, and the Console is manual.
3
Analyze the cloud architect's requirement to define, version-control, and replicate multi-tier infrastructure.
AWS CloudFormation is the service designed for declarative Infrastructure as Code (IaC), allowing templating, version control, and multi-environment deployment.
AWS Elastic Beanstalk is a PaaS for application hosting rather than low-level infrastructure management, and using SDK loop scripts lacks state management.

Anahtar Kavram

Selecting appropriate AWS interaction methods (Console, CLI, SDK, CloudFormation) based on automation, programmatic integration, and infrastructure provisioning needs.
Bu soruyu puanla