exam questions

Exam AWS DevOps Engineer Professional All Questions

View all questions & answers for the AWS DevOps Engineer Professional exam

Exam AWS DevOps Engineer Professional topic 1 question 185 discussion

Exam question from Amazon's AWS DevOps Engineer Professional
Question #: 185
Topic #: 1
[All AWS DevOps Engineer Professional Questions]

A company uses AWS Organizations to manage its AWS accounts. A DevOps engineer wants to deploy a new AWS Lambda function to all accounts in the organization by using AWS CloudFormation StackSets. The DevOps engineer uses a delegated administrator account to deploy the stack sets to the member accounts. The stack operation keeps failing, and the stack instance status is OUTDATED.

Which actions should the DevOps engineer take to remediate this error? (Choose two.)

  • A. Ensure that the AWS Region is the same for the stack sets and the target resources.
  • B. Ensure that the delegated administrator account has a trust relationship with the target account.
  • C. Ensure that the resources in the stacks do not have termination protection enabled by default.
  • D. Ensure that the CloudFormation template is creating unique global resources.
  • E. Deploy the stack sets from the management account and not from the delegated administrator account.
Show Suggested Answer Hide Answer
Suggested Answer: BD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
robotgeek
1 year, 11 months ago
Selected Answer: BE
If we assume that B is correct, then it makes sense that you need to deploy from the management account (in this setup) for the trust relationship to apply
upvoted 1 times
vn_thanhtung
1 year ago
pls read link: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-troubleshooting.html
upvoted 1 times
...
...
thirusk
2 years, 2 months ago
Selected Answer: BD
BD https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-troubleshooting.html
upvoted 1 times
...
Mark1000
2 years, 2 months ago
AB The only resource to deploy is a lambda, it is not a global resource, D is discarded, C has no impact, E the account has to be the delegate.
upvoted 1 times
...
andy_sds
2 years, 2 months ago
Selected Answer: BD
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-troubleshooting.html
upvoted 4 times
...
CloudFloater
2 years, 2 months ago
Selected Answer: AB
A - StackSets cannot create or update stack instances in regions that do not exist in the stack set. B- the delegated administrator account must be authorized to perform actions in the target account. NOT C - enabling termination protection on the resources in the stack should not affect the stack instance status. NOT D - creating unique global resources should not affect the stack instance status; if you create a non-unique global resource, it would result in stack creation failure not instance status of outdated.
upvoted 3 times
...
saeidp
2 years, 2 months ago
Selected Answer: BD
B and D are the best answeres
upvoted 4 times
saeidp
2 years, 2 months ago
Global resources like s3 bucket name must be insured that are given unique name regardless of region or account
upvoted 1 times
saeidp
2 years, 2 months ago
A is wrong. You can have your stack sets defined in a different region but deploy stacks in other regions
upvoted 5 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago