A developer needs to audit a production environment deployed via AWS CloudFormation because some resources may have been modified manually outside of the stack template. The developer wants to identify these out-of-band changes.
Which of the following actions should the developer perform to detect these modifications? (Select TWO.)
- Run drift detection on the entire CloudFormation stack from the AWS CloudFormation console or the AWS CLI.Cevap
- Review the drift status details of the stack and individual resources to compare the actual and expected configurations.Cevap
- CConfigure AWS Config to automatically update the CloudFormation stack template whenever an out-of-band change is made.
- DReview the AWS CloudTrail logs for a DeleteStack event to find the exact manual modifications and automatically restore them.
- EExecute the aws cloudformation rollback-stack CLI command to automatically sync the manual changes back to the template.
Cevap
Running drift detection on the CloudFormation stack and reviewing the drift status details to compare actual and expected configurations are the correct methods to identify manual changes.
To identify manual modifications made outside of CloudFormation, a developer can run drift detection on the stack. Reviewing the drift status details shows exactly which resources have drifted and how their actual configuration properties differ from the expected template configuration.
Adım Adım Çözüm
Anahtar Kavram
AWS CloudFormation Drift Detection