Examkin

Soru

Zorluk: ZorAWS Management, Governance, and Developer Tools

A financial institution is setting up its governance framework on AWS. The operations team has two key requirements: first, they must define and provision all cloud infrastructure using version-controlled, declarative templates to ensure consistency across staging and production environments; second, they must continuously log and audit all AWS API activity and user actions for compliance reporting. Which combination of AWS services should the company select to address these operational requirements?

  1. A
    AWS Elastic Beanstalk and Amazon CloudWatch
  2. B
    AWS CloudFormation and Amazon CloudWatch
  3. AWS CloudFormation and AWS CloudTrailCevap
  4. D
    AWS Elastic Beanstalk and AWS CloudTrail

Cevap

AWS CloudFormation and AWS CloudTrail
The correct answer combines AWS CloudFormation and AWS CloudTrail. AWS CloudFormation allows organizations to define their infrastructure as code (IaC) using templates, ensuring consistent provisioning across different environments. AWS CloudTrail provides the necessary governance and auditing capabilities by continuously tracking and logging API events and user actions across the AWS environment.

Adım Adım Çözüm

1
Analyze the first requirement: defining and provisioning infrastructure using declarative templates.
Identify AWS CloudFormation as the primary service for Infrastructure as Code (IaC) that provisions resources using YAML or JSON templates.
AWS CloudFormation allows declarative representation of resources to maintain consistency across multiple environments.
2
Analyze the second requirement: continuously logging and auditing all API activity and user actions.
Identify AWS CloudTrail as the service designed to record API actions and user activity across the AWS account.
AWS CloudTrail tracks actions taken by users, roles, or AWS services, which is necessary for compliance and security auditing.
3
Combine the results and evaluate the options to find the correct pair.
Select the option containing both AWS CloudFormation and AWS CloudTrail.
This combination directly fulfills both requirements, whereas other options misuse Amazon CloudWatch for auditing API actions or AWS Elastic Beanstalk for declarative infrastructure provisioning.

Anahtar Kavram

Selecting appropriate AWS management and governance tools for infrastructure provisioning and compliance auditing.
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

AWS Management, Governance, and Developer Tools

Bu konudan daha fazla soru