Exam AWS Certified DevOps Engineer - Professional DOP-C02 All Questions

View all questions & answers for the AWS Certified DevOps Engineer - Professional DOP-C02 exam

Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 83 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 83
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A DevOps engineer is deploying a new version of a company’s application in an AWS CodeDeploy deployment group associated with its Amazon EC2 instances. After some time, the deployment fails. The engineer realizes that all the events associated with the specific deployment ID are in a Skipped status, and code was not deployed in the instances associated with the deployment group.

What are valid reasons for this failure? (Choose two.)

A. The networking configuration does not allow the EC2 instances to reach the internet via a NAT gateway or internet gateway, and the CodeDeploy endpoint cannot be reached.
B. The IAM user who triggered the application deployment does not have permission to interact with the CodeDeploy endpoint.
C. The target EC2 instances were not properly registered with the CodeDeploy endpoint.
D. An instance profile with proper permissions was not attached to the target EC2 instances.
E. The appspec.yml file was not included in the application revision.

Show Suggested Answer

Suggested Answer: AD 🗳️

by ParagSanyashiv at May 9, 2023, 3:56 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

haazybanj

Highly Voted 1 year, 11 months ago

Selected Answer: AD

A. Explanation: For CodeDeploy to work, the EC2 instances need to reach the CodeDeploy endpoint to download the deployment artifacts. If the networking configuration of the EC2 instances does not allow them to access the internet via a NAT gateway or internet gateway, they won't be able to reach the CodeDeploy endpoint, leading to deployment failure. D Explanation: When EC2 instances are part of a CodeDeploy deployment group, they need to have an associated IAM instance profile with the necessary permissions to interact with CodeDeploy and download the deployment artifacts. If the instance profile with proper permissions is not attached to the target EC2 instances, the deployment will fail as the instances won't have the required permissions to complete the deployment process.

upvoted 11 times

...

rhinozD

Highly Voted 2 years ago

Selected Answer: AD

AD https://docs.aws.amazon.com/codedeploy/latest/userguide/troubleshooting-deployments.html Search with: Troubleshooting all lifecycle events skipped errors

upvoted 7 times

bnagaraja9099

1 year, 6 months ago

C is correct. the first reason for skipped errors on the link. The CodeDeploy agent might not be installed or running on the instance. To determine if the CodeDeploy agent is running:

upvoted 1 times

sejar

1 year, 3 months ago

No registration required, once agent is installed it should be sufficient. However permissions and network connectivity to S3 or code deploy would be must. Since that takes priority, A&D should be right.

upvoted 2 times

...

YucelFuat

Most Recent 9 months, 4 weeks ago

My question is "skipped" situation doesn't sound like a network error. There is no 4xx error or fail status

upvoted 1 times

...

zijo

1 year, 1 month ago

The user needs to create a service role and attach the AWSCodeDeployRole policy to it to grant the correct permissions for CodeDeploy to access EC2 instances. The role chosen should allow access to start and stop EC2 instances. If the IAM role used by CodeDeploy doesn't have the necessary permissions to access the deployment artifacts or interact with the EC2 instances, the deployment may be skipped. So it is not the IAM permissions of the user invoking the CodeDeploy.

upvoted 1 times

...

thanhnv142

1 year, 5 months ago

Selected Answer: AD

A and D are correct: the deployment process might be skipped because of codedeploy agent A: no connection means skipped deployment D: insufficient permission means skipped deployment

upvoted 2 times

...

khchan123

1 year, 5 months ago

Selected Answer: AD

A and D. See https://docs.aws.amazon.com/codedeploy/latest/userguide/troubleshooting-deployments.html#troubleshooting-skipped-lifecycle-events

upvoted 1 times

...

3a29cc4

1 year, 6 months ago

Do you really have to have internet connectivity to use CodeDeploy? Why not use VPC endpoint in such cases? I go for CD.

upvoted 1 times

...

yorkicurke

1 year, 6 months ago

Selected Answer: CD

Some of the other options could cause a deployment to fail, but not specifically result in a "Skipped" status: A Networking issues may prevent the deployment from reaching instances, but this would likely cause the deployment to fail, not be skipped. B Lack of permissions for the IAM user would cause the deployment job itself to fail authorization. E Missing appspec.yml would cause validation errors prior to the deployment attempt. Anyone has diffrent views?

upvoted 2 times

yorkicurke

1 year, 6 months ago

oh yeah; why; C -> CodeDeploy needs to be able to communicate with the instances in order to deploy revisions to them. If the instances are not registered, CodeDeploy will skip deploying to them. D - > i think everyone know that point. i guess dont need explaintion. Peace :)

upvoted 1 times

...