Aws-CloudFormation

What does Amazon CloudFormation provide?

• A. The ability to setup Autoscaling for Amazon EC2 instances.

• B. A templated resource creation for Amazon Web Services

• C. A template to map network resources for Amazon Web Services

• D. None of these

A user is planning to use AWS CloudFormation for his automatic deployment requirements. Which of the below mentioned components are required as a part of the template?

• A. Parameters

• B. Outputs

• C. Template version

• D. Resources

In regard to AWS CloudFormation, what is a stack?

• A. Set of AWS templates that are created and managed as a template

• B. Set of AWS resources that are created and managed as a template

• C. Set of AWS resources that are created and managed as a single unit

• D. Set of AWS templates that are created and managed as a single unit

1. A large enterprise wants to adopt CloudFormation to automate administrative tasks and implement the security principles of least privilege and separation of duties. They have identified the following roles with the corresponding tasks in the company:

(i) network administrators: create, modify and delete VPCs, subnets, NACLs, routing tables, and security groups

(ii) application operators: deploy complete application stacks (ELB, Auto -Scaling groups, RDS) whereas all resources must be deployed in the VPCs managed by the network administrators

(iii) Both groups must maintain their own CloudFormation templates and should be able to create, update and delete only their own CloudFormation stacks. The company has followed your advice to create two IAM groups, one for applications and one for networks.

Both IAM groups are attached to IAM policies that grant rights to perform the necessary task of each group as well as the creation, update and deletion of CloudFormation stacks. Given setup and requirements, which statements represent valid design considerations? Choose 2 answers [PROFESSIONAL]

• Network stack updates will fail upon attempts to delete a subnet with EC2 instances (Subnets cannot be deleted with instances in them)

• Unless resource level permissions are used on the CloudFormation: DeleteStack action, network administrators could tear down application stacks (Network administrators themselves need permission to delete resources within the application stack & CloudFormation makes calls to create, modify, and delete those resources on their behalf)

• The application stack cannot be deleted before all network stacks are deleted (Application stack can be deleted before network stack)

• The application stack cannot be deleted before all network stacks are deleted (Application stack can be deleted before network stack)

• Restricting the launch of EC2 instances into VPCs requires resource level permissions in the IAM policy of the application group (IAM permissions need to be given explicitly to launch instances )

Your team is excited about the use of AWS because now they have access to programmable infrastructure. You have been asked to manage your AWS infrastructure in a manner similar to the way you might manage application code. You want to be able to deploy exact copies of different versions of your infrastructure, stage changes into different environments, revert back to previous versions, and identify what versions are running at any particular time (development, test, QA, production). Which approach addresses this requirement?

• Use cost allocation reports and AWS Opsworks to deploy and manage your infrastructure.

• Use AWS CloudWatch metrics and alerts along with resource tagging to deploy and manage your infrastructure.

• Use AWS Beanstalk and a version control system like GIT to deploy and manage your infrastructure.

• Use AWS CloudFormation and a version control system like GIT to deploy and manage your infrastructure.

A user is using CloudFormation to launch an EC2 instance and then configure an application after the instance is launched. The user wants the stack creation of ELB and AutoScaling to wait until the EC2 instance is launched and configured properly. How can the user configure this?

• It is not possible that the stack creation will wait until one service is created and launched

• The user can use the HoldCondition resource to wait for the creation of the other dependent resources

• The user can use the DependentCondition resource to hold the creation of the other dependent resources

• The user can use the WaitCondition resource to hold the creation of the other dependent resources

A user has created a CloudFormation stack. The stack creates AWS services, such as EC2 instances, ELB, AutoScaling, and RDS. While creating the stack it created EC2, ELB and AutoScaling but failed to create RDS. What will CloudFormation do in this scenario?

• A. CloudFormation can never throw an error after launching a few services since it verifies all the steps before launching

• B. It will warn the user about the error and ask the user to manually create RDS

• C. Rollback all the changes and terminate all the created services

• D. It will wait for the user’s input about the error and correct the mistake after the input

A user is planning to use AWS CloudFormation. Which of the below mentioned functionalities does not help him to correctly understand CloudFormation?

• A. CloudFormation follows the DevOps model for the creation of Dev & Test

• B. AWS CloudFormation does not charge the user for its service but only charges for the AWS resources created with it

• C. CloudFormation works with a wide variety of AWS services, such as EC2, EBS, VPC, IAM, S3, RDS, ELB, etc

• D. CloudFormation provides a set of application bootstrapping scripts which enables the user to install Software

A customer is using AWS for Dev and Test. The customer wants to setup the Dev environment with CloudFormation. Which of the below mentioned steps are not required while using CloudFormation?

• A. Create a stack

• B. Configure a service

• C. Create and upload the template

• D. Provide the parameters configured as part of the template

A marketing research company has developed a tracking system that collects user behavior during web marketing campaigns on behalf of their customers all over the world. The tracking system consists of an auto-scaled group of Amazon Elastic Compute Cloud (EC2) instances behind an elastic load balancer (ELB), and the collected data is stored in Amazon DynamoDB. After the campaign is terminated, the tracking system is torn down and the data is moved to Amazon Redshift, where it is aggregated, analyzed and used to generate detailed reports. The company wants to be able to instantiate new tracking systems in any region without any manual intervention and therefore adopted AWS CloudFormation. What needs to be done to make sure that the AWS CloudFormation template works in every AWS region? Choose 2 answers [PROFESSIONAL]

• A. IAM users with the right to start AWS CloudFormation stacks must be defined for every target region. (IAM users are global)

• D. The names of the Amazon DynamoDB tables must be different in every target region. (DynamoDB names should be unique only within a region)

• C. Use the built-in function of AWS CloudFormation to set the AvailabilityZone attribute of the ELB resource.

• D. Avoid using DeletionPolicies for EBS snapshots. (Don’t want the data to be retained)

• E. Use the built-in Mappings and FindInMap functions of AWS CloudFormation to refer to the AMI ID set in the ImageId attribute of the Auto Scaling::LaunchConfiguration resource.