Exam AWS Certified DevOps Engineer - Professional DOP-C02 All Questions

View all questions & answers for the AWS Certified DevOps Engineer - Professional DOP-C02 exam

Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 208 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 208
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A company has deployed a complex container-based workload on AWS. The workload uses Amazon Managed Service for Prometheus for monitoring. The workload runs in an Amazon
Elastic Kubernetes Service (Amazon EKS) cluster in an AWS account.

The company’s DevOps team wants to receive workload alerts by using the company’s Amazon Simple Notification Service (Amazon SNS) topic. The SNS topic is in the same AWS account as the EKS cluster.

Which combination of steps will meet these requirements? (Choose three.)

A. Use the Amazon Managed Service for Prometheus remote write URL to send alerts to the SNS topic
B. Create an alerting rule that checks the availability of each of the workload’s containers.
C. Create an alert manager configuration for the SNS topic.
D. Modify the access policy of the SNS topic. Grant the aps.amazonaws.com service principal the sns:Publish permission and the sns:GetTopicAttributes permission for the SNS topic.
E. Modify the IAM role that Amazon Managed Service for Prometheus uses. Grant the role the sns:Publish permission and the sns:GetTopicAttributes permission for the SNS topic.
F. Create an OpenID Connect (OIDC) provider for the EKS cluster. Create a cluster service account. Grant the account the sns:Publish permission and the sns:GetTopicAttributes permission by using an IAM role.

Show Suggested Answer

Suggested Answer: BCD 🗳️

by Spavanko at Feb. 6, 2024, 7:31 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

xdkonorek2

Highly Voted 1 year ago

Selected Answer: BCD

https://docs.aws.amazon.com/prometheus/latest/userguide/Troubleshooting-alerting-no-policy.html

upvoted 5 times

...

Gomer

Highly Voted 1 year ago

Selected Answer: BCD

B:(YES) Steps towards "configuring rules and the alert manager in Amazon Managed Service for Prometheus via the AWS management console." "define an alerting rule that causes the Alert Manager to send a notification if a certain condition (defined in expr) holds true for a specified time period (for)." cat << EOF > rules.yaml groups: [...] rules: - alert: metric:alerting_rule expr: rate(adot_test_counter0[5m]) > 0.014 for: 5m EOF C:(YES) Add "SNS receiver to" "alert manager configuration" using ARN of "SNS topic"(Q208.5) D:(YES) "Give Amazon Managed Service for Prometheus permission to send messages to" SNS "Choose Access policy and add the following policy statement to the existing policy." [...] "Principal": { "Service": "aps.amazonaws.com" }, "Action": [ "sns:Publish", "sns:GetTopicAttributes"

upvoted 5 times

Gomer

1 year ago

https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-config.html https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html https://aws.amazon.com/blogs/mt/amazon-managed-service-for-prometheus-is-now-generally-available/

upvoted 1 times

...

teo2157

Most Recent 7 months, 1 week ago

Selected Answer: BCD

https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver.html

upvoted 2 times

...

seetpt

10 months, 4 weeks ago

I think BCD is true

upvoted 1 times

...

jamesf

11 months, 3 weeks ago

Selected Answer: BCD

BCD For D as You must give Amazon Managed Service for Prometheus permission to send messages to your Amazon SNS topic. The following policy statement will give that permission. ... https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html

upvoted 4 times

...

trungtd

1 year ago

Selected Answer: BCD

Agree with BCD

upvoted 4 times

...

KaranNishad

1 year ago

Selected Answer: BCD

BCD is answer

upvoted 4 times

...

that1guy

1 year, 2 months ago

Selected Answer: BCD

B, C, D, you need to grant the AMP Workspace access to the SQS queue via the SQS resource policy.

upvoted 5 times

vn_thanhtung

1 year, 1 month ago

https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html Agree with BCD

upvoted 2 times

...

seetpt

1 year, 2 months ago

Selected Answer: BCE

BCE for me

upvoted 1 times

...

c3518fc

1 year, 2 months ago

Selected Answer: BCE

Amazon Managed Service for Prometheus uses an IAM role to assume permissions, not a service principal. https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-IAM-permissions.html

upvoted 2 times

that1guy

1 year, 2 months ago

This is incorrect. This is for users/tools to manage alerts, not to publish to SQS from AMP.

upvoted 1 times

...

dkp

1 year, 3 months ago

Selected Answer: BCD

ill go with bcd

upvoted 5 times

...

WhyIronMan

1 year, 3 months ago

Selected Answer: BCD

B,C,D. There is no way to exclude D, as it is really necessary as per all AWS documentations. You can be in doubt of all the others, but not D

upvoted 5 times

...

CloudHandsOn

1 year, 3 months ago

Selected Answer: BCE

I'll go with BC & E. Im convinced that the Prometheus service role will need permissions added to push messages to SNS topic

upvoted 4 times

...

ogerber

1 year, 4 months ago

Selected Answer: BCE

https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alert-manager.html

upvoted 2 times

...

L1_

1 year, 4 months ago

Selected Answer: BCD

B: https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-APIReference-CreateAlertManagerAlerts.html C: https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html D: https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html

upvoted 3 times

...

DanShone

1 year, 4 months ago

Selected Answer: BCD

BCD Makes the most sense from the docs https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html

upvoted 4 times

...

Shasha1

1 year, 4 months ago

BCD According to this reference D is for sure : https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html

upvoted 1 times

...

Load full discussion...