Examkin

Soru

Zorluk: KolayAWS CloudFormation

A developer deployed an infrastructure stack using AWS CloudFormation. Later, a system administrator manually modified the port settings of an Amazon EC2 Security Group directly in the Amazon VPC Console to troubleshoot a connection issue. The developer needs to identify which specific configurations in the deployed stack no longer match the CloudFormation template definition. Which CloudFormation feature should the developer use to achieve this?

  1. A
    Create a Change Set to identify the differences between the current deployed state and the template.
  2. B
    Configure AWS CloudTrail integration to automatically roll back the stack to its original state.
  3. Use CloudFormation drift detection to compare the stack's actual configuration with the expected template configuration.Cevap
  4. D
    Use AWS Systems Manager Parameter Store to dynamically query the security group's live properties.

Cevap

Use CloudFormation drift detection to compare the stack's actual configuration with the expected template configuration.
Drift detection is a native CloudFormation feature designed to identify stack resources that have been modified outside of CloudFormation management (out-of-band). It compares the actual state of the resource properties with the expected state defined in the template.

Adım Adım Çözüm

1
Analyze the scenario to identify that an out-of-band manual modification has been made to a CloudFormation-managed resource.
The Security Group state has diverged from the template definition.
This establishes that the core issue is configuration drift.
2
Select the CloudFormation feature that inspects and reports on manual deviations.
CloudFormation drift detection is identified as the correct tool.
Drift detection compares stack resource property values against the expected template values to detect differences.

Anahtar Kavram

CloudFormation Drift Detection
Tahmini Süre:45s
Bu soruyu puanla

Konular

AWS CloudFormation

Bu konudan daha fazla soru