Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 316 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02

Question #: 316
Topic #: 1

[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A software company needs to create short-lived test environments to test pull requests as part of its development process. Each test environment consists of a single Amazon EC2 instance that is in an Auto Scaling group.

The test environments must be able to communicate with a central server to report test results. The central server is located in an on-premises data center. A solutions architect must implement a solution so that the company can create and delete test environments without any manual intervention. The company has created a transit gateway with a VPN attachment to the on-premises network.

Which solution will meet these requirements with the LEAST operational overhead?

A. Create an AWS CloudFormation template that contains a transit gateway attachment and related routing configurations. Create a CloudFormation stack set that includes this template. Use CloudFormation StackSets to deploy a new stack for each VPC in the account. Deploy a new VPC for each test environment.
B. Create a single VPC for the test environments. Include a transit gateway attachment and related routing configurations. Use AWS CloudFormation to deploy all test environments into the VPC.
C. Create a new OU in AWS Organizations for testing. Create an AWS CioudFormation template that contains a VPC, necessary networking resources, a transit gateway attachment, and related routing configurations. Create a CloudFormation stack set that includes this template. Use CloudFormation StackSets for deployments into each account under the testing OU. Create a new account for each test environment.
D. Convert the test environment EC2 instances into Docker images. Use AWS CloudFormation to configure an Amazon Elastic Kubernetes Service (Amazon EKS) cluster in a new VPC, create a transit gateway attachment, and create related routing configurations. Use Kubernetes to manage the deployment and lifecycle of the test environments.

Show Suggested Answer

Suggested Answer: B 🗳️

by KungLjao at Oct. 29, 2023, 7:04 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Richaqua

Highly Voted 1 year, 7 months ago

This question is very vague. It doesn't say whether each test env is an a separate VPC or a separate account. Not sure why Transit gateway is used here.

upvoted 9 times

...

joleneinthebackyard

Highly Voted 1 year, 8 months ago

Selected Answer: B

A: no need for new VPC for each test B: sounds ok C: creating new OU for each test? -> out D: too complex since need to containerize from code in EC2 instance

upvoted 7 times

...

AzureDP900

Most Recent 7 months, 2 weeks ago

B Option B creates a single VPC for all test environments, which allows them to share the same transit gateway attachment and routing configurations. This approach can simplify the network configuration and reduce the overhead of managing multiple VPCs. Each test environment still has its own isolated network space within the shared VPC, ensuring security and isolation between environments. In fact, option B is a good solution when the requirements don't specify that each test environment needs to have its own isolated network space. Since the test environments only need to communicate with a central server in an on-premises data center, using a single VPC might be sufficient.

upvoted 1 times

...

red_panda

1 year, 1 month ago

Selected Answer: A

I'm going with A. There is no needed to have the Transit Gateway without more VPCs for each account. It's also a best practices to have separate environments to isolate test.

upvoted 2 times