exam questions

Exam AWS Certified DevOps Engineer - Professional DOP-C02 All Questions

View all questions & answers for the AWS Certified DevOps Engineer - Professional DOP-C02 exam

Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 208 discussion

A company has deployed a complex container-based workload on AWS. The workload uses Amazon Managed Service for Prometheus for monitoring. The workload runs in an Amazon
Elastic Kubernetes Service (Amazon EKS) cluster in an AWS account.

The company’s DevOps team wants to receive workload alerts by using the company’s Amazon Simple Notification Service (Amazon SNS) topic. The SNS topic is in the same AWS account as the EKS cluster.

Which combination of steps will meet these requirements? (Choose three.)

  • A. Use the Amazon Managed Service for Prometheus remote write URL to send alerts to the SNS topic
  • B. Create an alerting rule that checks the availability of each of the workload’s containers.
  • C. Create an alert manager configuration for the SNS topic.
  • D. Modify the access policy of the SNS topic. Grant the aps.amazonaws.com service principal the sns:Publish permission and the sns:GetTopicAttributes permission for the SNS topic.
  • E. Modify the IAM role that Amazon Managed Service for Prometheus uses. Grant the role the sns:Publish permission and the sns:GetTopicAttributes permission for the SNS topic.
  • F. Create an OpenID Connect (OIDC) provider for the EKS cluster. Create a cluster service account. Grant the account the sns:Publish permission and the sns:GetTopicAttributes permission by using an IAM role.
Show Suggested Answer Hide Answer
Suggested Answer: BCD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
xdkonorek2
Highly Voted 10 months, 3 weeks ago
Selected Answer: BCD
https://docs.aws.amazon.com/prometheus/latest/userguide/Troubleshooting-alerting-no-policy.html
upvoted 5 times
...
Gomer
Highly Voted 10 months, 1 week ago
Selected Answer: BCD
B:(YES) Steps towards "configuring rules and the alert manager in Amazon Managed Service for Prometheus via the AWS management console." "define an alerting rule that causes the Alert Manager to send a notification if a certain condition (defined in expr) holds true for a specified time period (for)." cat << EOF > rules.yaml groups: [...] rules: - alert: metric:alerting_rule expr: rate(adot_test_counter0[5m]) > 0.014 for: 5m EOF C:(YES) Add "SNS receiver to" "alert manager configuration" using ARN of "SNS topic"(Q208.5) D:(YES) "Give Amazon Managed Service for Prometheus permission to send messages to" SNS "Choose Access policy and add the following policy statement to the existing policy." [...] "Principal": { "Service": "aps.amazonaws.com" }, "Action": [ "sns:Publish", "sns:GetTopicAttributes"
upvoted 5 times
Gomer
10 months, 1 week ago
https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-config.html https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html https://aws.amazon.com/blogs/mt/amazon-managed-service-for-prometheus-is-now-generally-available/
upvoted 1 times
...
...
teo2157
Most Recent 5 months ago
Selected Answer: BCD
https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver.html
upvoted 2 times
...
seetpt
8 months, 3 weeks ago
I think BCD is true
upvoted 1 times
...
[Removed]
8 months, 3 weeks ago
Selected Answer: BCD
BCD for me
upvoted 3 times
...
jamesf
9 months, 2 weeks ago
Selected Answer: BCD
BCD For D as You must give Amazon Managed Service for Prometheus permission to send messages to your Amazon SNS topic. The following policy statement will give that permission. ... https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html
upvoted 4 times
...
trungtd
10 months, 1 week ago
Selected Answer: BCD
Agree with BCD
upvoted 4 times
...
KaranNishad
10 months, 2 weeks ago
Selected Answer: BCD
BCD is answer
upvoted 4 times
...
that1guy
1 year ago
Selected Answer: BCD
B, C, D, you need to grant the AMP Workspace access to the SQS queue via the SQS resource policy.
upvoted 5 times
vn_thanhtung
11 months, 4 weeks ago
https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html Agree with BCD
upvoted 2 times
...
...
seetpt
1 year ago
Selected Answer: BCE
BCE for me
upvoted 1 times
...
c3518fc
1 year ago
Selected Answer: BCE
Amazon Managed Service for Prometheus uses an IAM role to assume permissions, not a service principal. https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-IAM-permissions.html
upvoted 2 times
that1guy
1 year ago
This is incorrect. This is for users/tools to manage alerts, not to publish to SQS from AMP.
upvoted 1 times
...
...
dkp
1 year, 1 month ago
Selected Answer: BCD
ill go with bcd
upvoted 5 times
...
WhyIronMan
1 year, 1 month ago
Selected Answer: BCD
B,C,D. There is no way to exclude D, as it is really necessary as per all AWS documentations. You can be in doubt of all the others, but not D
upvoted 5 times
...
CloudHandsOn
1 year, 1 month ago
Selected Answer: BCE
I'll go with BC & E. Im convinced that the Prometheus service role will need permissions added to push messages to SNS topic
upvoted 4 times
...
ogerber
1 year, 1 month ago
Selected Answer: BCE
https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alert-manager.html
upvoted 2 times
...
L1_
1 year, 1 month ago
Selected Answer: BCD
B: https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-APIReference-CreateAlertManagerAlerts.html C: https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html D: https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html
upvoted 3 times
...
DanShone
1 year, 1 month ago
Selected Answer: BCD
BCD Makes the most sense from the docs https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alertmanager-receiver-AMPpermission.html
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago