AWS Certified Associate SOA-C02 Updated Exam

Accepted and rejected traffic: In this example, RDP traffic (destination port 3389, TCP protocol) to network interface eni-1235b8ca123456789 in account 123456789010 was rejected. 2 123456789010 eni-1235b8ca123456789 172.31.9.69 172.31.9.12 49761 3389 6 20 4249 1418530010 1418530070 REJECT OK

A CloudFormation stack in the DELETE_FAILED state typically indicates that some resources could not be deleted. One common reason is that S3 buckets in the stack still contain objects.

Steps:

Identify the Failed Resources:

Open the AWS CloudFormation console.

Select the stack in the DELETE_FAILED state.

Check the "Events" tab to identify the resource(s) that caused the failure.

Delete S3 Objects:

Open the Amazon S3 console.

Navigate to the bucket(s) listed in the CloudFormation events.

Delete all objects in the bucket. You can use the S3 console, AWS CLI, or an S3 batch operation to delete the objects.

Retry Stack Deletion:

After clearing the S3 bucket(s), go back to the CloudFormation console.

Select the stack and choose "Delete" to retry the deletion process.

References:

Deleting a Stack

Troubleshooting AWS CloudFormation

Weighted routing in Route 53 allows you to direct a percentage of traffic to different resources by configuring specific weights. For this requirement, you can:

Weighted Routing Policy: This is the most suitable approach for gradually rolling out a new version by controlling traffic distribution.

Weight Configuration: Setting a weight of 80 for the original resource and 20 for the new resource ensures that 80% of the traffic continues to go to the existing version, while 20% is directed to the new version.

Other routing policies, such as failover and multivalue answer, are not intended for traffic distribution based on percentage; they serve different use cases.

Enabling Instance Scale-In Protection:

Instance scale-in protection prevents Auto Scaling from terminating specific instances.

Steps:

Go to the AWS Management Console.

Navigate to EC2 and select "Auto Scaling Groups."

Select your Auto Scaling group.

Go to the "Instance management" tab.

Select the instances you want to protect and click "Actions."

Choose "Enable scale-in protection."

This ensures that instances are not terminated during troubleshooting.