PAS-C01 · Question #18
An SAP solutions architect is using AWS Systems Manager Distributor to install the AWS Data Provider for SAP on production SAP application servers and SAP HANA database servers. The SAP application…
The correct answer is C. Create an IAM role. Attach the appropriate policy to the role. Attach the role to the appropriate EC2. The error is explicitly an access and authorization error related to CloudWatch and EC2, with no connectivity issue. This indicates that the EC2 instances lack the necessary IAM permissions to call AWS APIs. The AWS Data Provider for SAP needs to write custom metrics to Amazon…
Question
An SAP solutions architect is using AWS Systems Manager Distributor to install the AWS Data Provider for SAP on production SAP application servers and SAP HANA database servers. The SAP application servers and the SAP HANA database servers are running on Red Hat Enterprise Linux. The SAP solutions architect chooses instances manually in Systems Manager Distributor and schedules installation. The installation fails with an access and authorization error related to Amazon CloudWatch and Amazon EC2 instances. There is no error related to AWS connectivity. What should the SAP solutions architect do to resolve the error?
Options
- AInstall the CloudWatch agent on the servers before installing the AWS Data Provider for SAP.
- BDownload the AWS Data Provider for SAP installation package from AWS Marketplace. Use an
- CCreate an IAM role. Attach the appropriate policy to the role. Attach the role to the appropriate EC2
- DWait until Systems Manager Agent is fully installed and ready to use on the EC2 instances. Use
How the community answered
(37 responses)- A8% (3)
- B3% (1)
- C78% (29)
- D11% (4)
Explanation
The error is explicitly an access and authorization error related to CloudWatch and EC2, with no connectivity issue. This indicates that the EC2 instances lack the necessary IAM permissions to call AWS APIs. The AWS Data Provider for SAP needs to write custom metrics to Amazon CloudWatch and make EC2 describe API calls, which require an IAM role with policies such as CloudWatch:PutMetricData and ec2:Describe*. The solution is to create an IAM role with the appropriate policies and attach it to the EC2 instances. Installing the CloudWatch agent (A) does not resolve an IAM authorization error. Downloading from Marketplace (B) does not fix permissions. Waiting for SSM Agent (D) is not relevant since Systems Manager Distributor is already successfully communicating with the instances.
Topics
Community Discussion
No community discussion yet for this question.