DOP-C02 Question #120: Real Exam Question with Answer & Explanation

Question

A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector. The AWS Lambda function ran and created AD Connector, but CloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE_COMPLETE. Which action should the engineer take to resolve this issue?

Options

• AEnsure the Lambda function code has exited successfully.
• BEnsure the Lambda function code returns a response to the pre-signed URL.
• CEnsure the Lambda function IAM role has cloudformation:UpdateStack permissions for the stack ARN.
• DEnsure the Lambda function IAM role has ds:ConnectDirectory permissions for the AWS account.

Explanation

When using a custom resource in CloudFormation, the AWS Lambda function responsible for handling the resource creation should send a response to the pre-signed URL provided by CloudFormation. This response signals the completion status of the custom resource creation process to CloudFormation. In this case, since the Lambda function successfully created the AD Connector, the engineer should ensure that the Lambda function code includes the logic to send a response to the pre- signed URL. This response should indicate the success status and any relevant data, such as the ARN or other details of the created AD Connector.

No community discussion yet for this question.