SOA-C03 · Question #131
A CloudOps engineer is troubleshooting an implementation of Amazon CloudWatch Synthetics. The CloudWatch Synthetics results must be sent to an Amazon S3 bucket. The CloudOps engineer has copied the…
The correct answer is D. Ensure that the DNS resolution option and the DNS hostnames option are turned on in the VPC. When a CloudWatch Synthetics canary runs inside a private VPC, it must access CloudWatch and S3 privately for publishing logs, metrics, and storing results. Because there is no internet access, the canary requires: - DNS resolution and hostnames enabled for proper endpoint…
Question
A CloudOps engineer is troubleshooting an implementation of Amazon CloudWatch Synthetics. The CloudWatch Synthetics results must be sent to an Amazon S3 bucket. The CloudOps engineer has copied the configuration of an existing canary that runs on a VPC that has an internet gateway attached. However, the CloudOps engineer cannot get the canary to successfully start on a private VPC that has no internet access. What should the CloudOps engineer do to successfully run the canary on the private VPC?
Options
- AEnsure that the DNS resolution option and the DNS hostnames option are turned on in the VPC.
- BEnsure that the DNS resolution option and the DNS hostnames option are turned off in the VPC.
- CEnsure that the DNS resolution option and the DNS hostnames option are turned off in the VPC.
- DEnsure that the DNS resolution option and the DNS hostnames option are turned on in the VPC.
How the community answered
(33 responses)- A3% (1)
- B3% (1)
- C9% (3)
- D85% (28)
Explanation
When a CloudWatch Synthetics canary runs inside a private VPC, it must access CloudWatch and S3 privately for publishing logs, metrics, and storing results. Because there is no internet access, the canary requires: - DNS resolution and hostnames enabled for proper endpoint resolution. - An interface VPC endpoint for CloudWatch, so the canary can communicate with the CloudWatch service privately. - A gateway VPC endpoint for S3, to allow results to be written to the S3 bucket without internet
Topics
Community Discussion
No community discussion yet for this question.