DevOps Configuration Management & Infrastructure as Code Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 DevOps Configuration Management & Infrastructure as Code flashcards as text
A DevOps engineer needs to store database passwords used by Lambda functions securely and rotate them automatically. Which AWS service is best suited for this?
Answer: AWS Secrets Manager
AWS Secrets Manager provides built-in secret rotation with Lambda integration and is specifically designed for credentials like database passwords.
In a CloudFormation template, which intrinsic function retrieves the value of a resource's attribute, such as an S3 bucket's ARN?
Answer: !GetAtt
!GetAtt retrieves specific attributes of a resource, like the ARN or DNS name, whereas !Ref typically returns just the resource's primary identifier.
Which CloudFormation feature allows you to create reusable templates for common infrastructure patterns that can be shared across accounts?
Answer: CloudFormation Modules
CloudFormation Modules allow you to package reusable resource configurations and share them through the CloudFormation registry across accounts.
A team wants to deploy identical infrastructure across 20 AWS accounts in 3 regions simultaneously using CloudFormation. Which feature enables this?
Answer: CloudFormation StackSets
CloudFormation StackSets extend CloudFormation stacks by enabling deployment of the same template across multiple accounts and regions from a single operation.
In AWS CDK, what is a 'Construct' at its most fundamental level?
Answer: A reusable cloud component representing one or more AWS resources
A Construct is the basic building block of CDK apps, representing a cloud component that can encapsulate one or more AWS resources with their configuration.
Which Ansible concept describes a collection of tasks, handlers, variables, and templates organized as a reusable unit of automation?
Answer: Role
An Ansible Role is a standardized file structure that groups related tasks, handlers, variables, and templates into a self-contained, reusable automation unit.
A CloudFormation template needs to accept different instance types for dev vs. prod environments. Which CloudFormation feature enables this without duplicating templates?
Answer: CloudFormation Parameters
CloudFormation Parameters allow users to pass in custom values at stack creation or update time, making a single template adaptable to multiple environments.