DOP-C02 · Question #222
A DevOps engineer has developed an AWS Lambda function. The Lambda function starts an AWS CloudFormation drift detection operation on all supported resources for a specific CloudFormation stack. The…
The correct answer is D. Configure AWS Config in the account. Use the cloudformation-stack-drift-detection-check. https://aws.amazon.com/blogs/mt/implementing-an-alarm-to-automatically-detect-drift-in-aws- cloudformation-stacks/ https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-
Question
A DevOps engineer has developed an AWS Lambda function. The Lambda function starts an AWS CloudFormation drift detection operation on all supported resources for a specific CloudFormation stack. The Lambda function then exits its invocation. The DevOps engineer has created an Amazon EventBridge scheduled rule that invokes the Lambda function every hour. An Amazon Simple Notification Service (Amazon SNS) topic already exists in the AWS account. The DevOps engineer has subscribed to the SNS topic to receive notifications. The DevOps engineer needs to receive a notification as soon as possible when drift is detected in this specific stack configuration. Which solution will meet these requirements?
Options
- AConfigure the existing EventBridge rule to also target the SNS topic. Configure an SNS
- BCreate a second Lambda function to query the CloudFormation API for the drift detection results
- CConfigure Amazon GuardDuty in the account with drift detection for all CloudFormation stacks.
- DConfigure AWS Config in the account. Use the cloudformation-stack-drift-detection-check
How the community answered
(27 responses)- A11% (3)
- B4% (1)
- C4% (1)
- D81% (22)
Explanation
https://aws.amazon.com/blogs/mt/implementing-an-alarm-to-automatically-detect-drift-in-aws- cloudformation-stacks/ https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-
Topics
Community Discussion
No community discussion yet for this question.