A SysOps Administrator needs to determine if any resources in an active AWS CloudFormation stack have been modified by manual changes that were made outside of CloudFormation.
Which of the following steps should the administrator perform to identify this configuration drift? (Select TWO.)
- Run drift detection on the stack using the AWS CloudFormation console or the AWS CLI.Cevap
- Review the stack drift status details to compare the actual resource property values with the expected values defined in the template.Cevap
- CConfigure AWS CloudFormation to automatically rollback the stack to undo any detected out-of-band modifications.
- DUpdate the CloudFormation execution role with the iam:PassRole permission to allow CloudFormation to auto-remediate the drift.
- EInitiate a stack rollback operation to force the resources to synchronize with the original template parameters.
Cevap
To identify configuration drift, run drift detection on the stack using either the CloudFormation console or AWS CLI, and then review the stack drift status details to compare the actual resource properties against the expected ones in the template.
Running drift detection and reviewing the drift status details are the correct steps. Drift detection compares the actual state of resources to the expected state defined in the stack template. The drift status details show the specific resource properties that have drifted.
Adım Adım Çözüm
Anahtar Kavram
CloudFormation drift detection allows SysOps Administrators to identify resources that have been modified outside of CloudFormation management by comparing actual resource configurations against the template.