ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 418 - SOA-C02 discussion

Report
Export

The SysOps administrator must dynamically reference the latest AMI ID from Systems Manager Parameter Store in CloudFormation templates for new AMI versions.

A.

Create a new Systems Manager parameter to store the AMI value in the standard parameter tier.

Answers
A.

Create a new Systems Manager parameter to store the AMI value in the standard parameter tier.

B.

Create a new Systems Manager parameter to store the AMI value in the advanced parameter tier.

Answers
B.

Create a new Systems Manager parameter to store the AMI value in the advanced parameter tier.

C.

Enable trusted access with Organizations.

Answers
C.

Enable trusted access with Organizations.

D.

Enable resource sharing with Organizations.

Answers
D.

Enable resource sharing with Organizations.

E.

Create a resource share by using AWS Resource Access Manager (AWS RAM). Specify the new parameter as the resource. Specify the entire organization as the principal.

Answers
E.

Create a resource share by using AWS Resource Access Manager (AWS RAM). Specify the new parameter as the resource. Specify the entire organization as the principal.

F.

Create an Amazon EventBridge rule that invokes an AWS Lambda function when a new AMI is published. Program the Lambda function to assume an IAM role in all linked accounts and to update Parameter Store with the new AMI ID.

Answers
F.

Create an Amazon EventBridge rule that invokes an AWS Lambda function when a new AMI is published. Program the Lambda function to assume an IAM role in all linked accounts and to update Parameter Store with the new AMI ID.

Suggested answer: A, D, E

Explanation:

To allow CloudFormation templates in all accounts within the organization to reference the latest AMI ID:

Parameter Store in Standard Tier: Storing the AMI ID in Systems Manager Parameter Store provides a central and easy-to-update source.

Enable Resource Sharing with Organizations: This allows the parameter to be shared across accounts in the organization.

Resource Share in AWS RAM: AWS Resource Access Manager (RAM) can be used to share the parameter with the entire organization, allowing other accounts to access the AMI ID.

Using the standard tier in Parameter Store is sufficient, and an EventBridge rule with Lambda for updating AMIs would add unnecessary complexity.

asked 06/11/2024
Alessandro Cristofori
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first