Soru

Zorluk: KolayAWS CloudFormation Stack and Drift Management

A SysOps Administrator performs a drift detection operation on an AWS CloudFormation stack that contains an Amazon S3 bucket. The drift detection report shows that the S3 bucket has a drift status of DELETED. Which of the following describes the root cause of this drift status?

  1. The S3 bucket was deleted directly from the AWS account outside of CloudFormation operations.Cevap
  2. B
    The CloudFormation stack deletion failed, and the stack has rolled back to its previous state.
  3. C
    The CloudFormation service role lacks the necessary permissions to describe or access the S3 bucket.
  4. D
    The S3 bucket was automatically terminated as part of a blue/green deployment strategy to save costs.

Cevap

The S3 bucket was deleted directly from the AWS account outside of CloudFormation operations.
The correct answer is correct because CloudFormation drift detection compares the current resource state against the expected state defined in the stack template. If a resource exists in the template but has been deleted from the AWS account via the AWS Console, CLI, or API, the drift status for that resource is marked as DELETED.

Adım Adım Çözüm

1
Understand CloudFormation drift detection concepts.
Drift detection compares the expected configuration of a resource (as defined in the CloudFormation template) with its actual configuration in the AWS environment.
This establishes the baseline of what drift detection is measuring.
2
Interpret the DELETED drift status.
A drift status of DELETED means the resource exists in the template but does not exist in the AWS account.
This identifies the specific meaning of the DELETED status.
3
Differentiate between CloudFormation actions and out-of-band actions.
Out-of-band actions (deleting resources directly via console, CLI, or APIs) lead to drift. Actions managed by CloudFormation update the stack's state and do not show as drifted.
This confirms that the deletion must have happened outside of CloudFormation.

Anahtar Kavram

CloudFormation Drift Detection Statuses
Bu soruyu puanla