AWS DevOps DevOps Configuration Management & Infrastructure as Code 5

Question 1

A team wants to enforce that all EC2 instances launched via CloudFormation must use approved AMIs. Which AWS service enforces this as a preventive control?

Accepted Answer

AWS CloudFormation Guard (cfn-guard)

Answer

CloudFormation Guard allows you to write policy-as-code rules that validate CloudFormation templates before deployment, blocking non-compliant resources from being created.

Question 2

In AWS CloudFormation, what is the purpose of a Change Set?

Accepted Answer

To preview proposed changes to a stack before executing the update

Answer

A Change Set shows a summary of proposed changes to a CloudFormation stack, allowing you to review and understand the impact before executing the actual update.

Question 3

A DevOps team uses Chef for configuration management. What is the Chef component that contains configuration policies defining the desired state of a node?

Accepted Answer

Recipe

Answer

A Chef Recipe is a Ruby-based file containing resources that define the desired state of a system component, and Cookbooks group related recipes together.

Question 4

Which AWS CDK command updates the CloudFormation bootstrap stack in an account/region to support CDK deployments?

Accepted Answer

cdk bootstrap

Answer

`cdk bootstrap` provisions the CDKToolkit CloudFormation stack that creates the S3 bucket and IAM roles needed for CDK deployments in an account/region.

Question 5

A CloudFormation template references outputs from another stack. Which intrinsic function is used to import these cross-stack values?

Accepted Answer

!ImportValue

Answer

!ImportValue retrieves the value of an output exported by another CloudFormation stack, enabling cross-stack resource sharing.

AWS Practice Test

AWS Practice Test

AWS DevOps DevOps Configuration Management & Infrastructure as Code 5