SAP-C02 · Question #159
A company's CISO has asked a Solutions Architect to re-engineer the company's current CI/CD practices to make sure patch deployments to its application can happen as quickly as possible with minimal…
The correct answer is B. Configure CodePipeline with a deploy stage using AWS CodeDeploy configured for blue/green. To enable fast patch deployments with minimal downtime and quick rollback for an EC2-based web application, the solutions architect should configure AWS CodePipeline with an AWS CodeDeploy blue/green deployment strategy.
Question
A company's CISO has asked a Solutions Architect to re-engineer the company's current CI/CD practices to make sure patch deployments to its application can happen as quickly as possible with minimal downtime if vulnerabilities are discovered. The company must also be able to quickly roll back a change in case of errors. The web application is deployed in a fleet of Amazon EC2 instances behind an Application Load Balancer. The company is currently using GitHub to host the application source code, and has configured an AWS CodeBuild project to build the application. The company also intends to use AWS CodePipeline to trigger builds from GitHub commits using the existing CodeBuild project. What CI/CD configuration meets all of the requirements?
Options
- AConfigure CodePipeline with a deploy stage using AWS CodeDeploy configured for in-place
- BConfigure CodePipeline with a deploy stage using AWS CodeDeploy configured for blue/green
- CConfigure CodePipeline with a deploy stage using AWS CloudFormation to create a pipeline for
- DConfigure the CodePipeline with a deploy stage using AWS OpsWorks and in-place deployments.
How the community answered
(35 responses)- A9% (3)
- B86% (30)
- C3% (1)
- D3% (1)
Why each option
To enable fast patch deployments with minimal downtime and quick rollback for an EC2-based web application, the solutions architect should configure AWS CodePipeline with an AWS CodeDeploy blue/green deployment strategy.
In-place deployments with CodeDeploy update instances directly, which can cause downtime as instances are updated and typically involve longer rollback times compared to blue/green deployments.
AWS CodeDeploy's blue/green deployment strategy meets all requirements by deploying the new version to a separate environment, allowing zero-downtime traffic shifting for minimal impact during patches, and providing instant rollback by diverting traffic back to the original stable environment.
Using AWS CloudFormation to create a pipeline for deployments is not the most suitable method for application patch deployments requiring minimal downtime and quick rollback; CodeDeploy is specifically designed for these application deployment scenarios.
AWS OpsWorks in-place deployments have similar limitations to CodeDeploy's in-place strategy regarding downtime and rollback efficiency, and CodeDeploy is generally the more modern and flexible option for application deployments with CodePipeline.
Concept tested: AWS CodeDeploy blue/green deployments for CI/CD
Source: https://docs.aws.amazon.com/codedeploy/latest/userguide/blue-green-create-deployment.html
Community Discussion
No community discussion yet for this question.