Examkin

Soru

Zorluk: OrtaAWS CloudFormation

A developer is managing an AWS CloudFormation stack for a web application. The application requires a database password that must be rotated automatically every 30 days. During a stack update to modify the application configuration, a database connection error causes the update to fail, leaving the stack stuck in the UPDATE_ROLLBACK_FAILED state. Which combination of actions should the developer take to securely retrieve the database password in the template and resolve the failed stack update?

  1. Reference the database password in the template using a dynamic reference to AWS Secrets Manager, resolve the database connection issue, and run the ContinueUpdateRollback command.Cevap
  2. B
    Reference the database password in the template using a dynamic reference to AWS Systems Manager Parameter Store, resolve the database connection issue, and run the ContinueUpdateRollback command.
  3. C
    Reference the database password in the template using a dynamic reference to AWS Secrets Manager, resolve the database connection issue, and immediately run a new UpdateStack operation to force the stack out of the rollback state.
  4. D
    Reference the database password in the template using a dynamic reference to AWS Secrets Manager, manually update the credentials in the Amazon RDS console to bypass the rollback failure, and run a stack update.

Cevap

Reference the database password in the template using a dynamic reference to AWS Secrets Manager, resolve the database connection issue, and run the ContinueUpdateRollback command.
The correct answer combines retrieving rotated secrets using Secrets Manager dynamic references with recovering a stuck stack using the ContinueUpdateRollback command. Secrets Manager supports automatic secret rotation, and dynamic references securely fetch these secrets without exposing them. When a stack is in the UPDATE_ROLLBACK_FAILED state, it cannot be updated directly; the underlying issue must be fixed, and ContinueUpdateRollback must be run to complete the rollback to a stable state.

Adım Adım Çözüm

1
Select the correct secrets retrieval mechanism.
Identify that AWS Secrets Manager supports dynamic references and automatic rotation, unlike Parameter Store which is not designed for native secret rotation.
The requirement specifies that the database password must be rotated automatically every 30 days.
2
Identify the mechanism to resolve the stack rollback failure.
Determine that a stack stuck in UPDATE_ROLLBACK_FAILED cannot be updated directly and requires a ContinueUpdateRollback operation after fixing the underlying resource issue.
CloudFormation blocks new stack updates until the stack returns to a stable state (e.g., UPDATE_ROLLBACK_COMPLETE).

Anahtar Kavram

AWS CloudFormation Stack Rollback Resolution and Secrets Management Integration
Bu soruyu puanla

Konular

AWS CloudFormation

Bu konudan daha fazla soru