Amazon Web Services SOA-C02 Actual Questions

The default behavior of AWS CloudFormation when the creation of a resource fails is to roll back the stack and delete the stack.

Stack Creation Failure:

If any resource within the stack fails to create, CloudFormation rolls back the stack by deleting all the resources that were successfully created up to the point of failure.

This ensures that no partially created resources are left in the user's account.

Review the Events:

Open the CloudFormation console.

Select the stack and review the "Events" tab to identify the cause of the failure.

References:

AWS CloudFormation Stack Rollback

Troubleshooting AWS CloudFormation

To provision AWS accounts for each team with a defined baseline and governance guardrails in a scalable and efficient way, using AWS Control Tower is the best solution.

AWS Control Tower:

AWS Control Tower provides a straightforward way to set up and govern a secure, multi-account AWS environment based on best practices.

It uses Account Factory, a feature that automates the creation of new AWS accounts with predefined configurations.

Creating Accounts with Control Tower:

Navigate to the AWS Control Tower console.

Use Account Factory to create a new account.

Customize the account template to include the necessary configurations, such as organizational units (OUs), guardrails, and baselines.

Advantages:

Ensures consistent security and compliance across all accounts.

Automates account creation and configuration, saving time and reducing errors.

References:

AWS Control Tower

Setting Up Account Factory

Using AWS Systems Manager Distributor and State Manager is an automated and scalable solution for managing software installation across EC2 instances.

Systems Manager Distributor: Allows packaging and distributing the auditing software across multiple Regions.

State Manager Association: Automates software installation on both existing and new instances, ensuring consistent deployment across all managed instances.

Manually connecting to instances or using Lambda is not scalable or efficient for this type of ongoing software management.