AWS DevOps Serverless Deployment 4

Question 1

A DevOps engineer wants to automatically roll back a Lambda deployment if CloudWatch alarms trigger. Which CodeDeploy feature enables this?

Accepted Answer

Automatic rollback on alarm

Answer

CodeDeploy supports automatic rollback configuration that reverts a deployment when specified CloudWatch alarms enter the ALARM state.

Question 2

Which environment variable is automatically set by Lambda and provides the name of the current function's CloudWatch log group?

Accepted Answer

AWS_LAMBDA_LOG_GROUP_NAME

Answer

AWS_LAMBDA_LOG_GROUP_NAME is a reserved environment variable automatically injected by Lambda with the function's log group path.

Question 3

In a serverless CI/CD pipeline, a Lambda function needs read access to an S3 bucket. What is the most secure way to grant this access?

Accepted Answer

Attach an IAM role with least-privilege S3 read policy to the function

Answer

Attaching an IAM execution role with a least-privilege policy is the AWS-recommended approach, as Lambda automatically assumes the role without static credentials.

Question 4

What happens to in-flight Lambda invocations during a CodeDeploy traffic-shifting deployment when automatic rollback is triggered?

Accepted Answer

They complete on the version they started on; no new invocations go to the new version

Answer

In-flight invocations complete normally on the version they started; CodeDeploy simply stops routing new traffic to the new version and reverts the alias.

Question 5

A team uses AWS SAM to deploy a Lambda function triggered by EventBridge. Which SAM event source type should they use?

Accepted Answer

EventBridgeRule

Answer

The EventBridgeRule event type in SAM creates an EventBridge rule that triggers the Lambda function based on the specified event pattern or schedule.

AWS Practice Test

AWS Practice Test

AWS DevOps Serverless Deployment 4