Skip to Content

SOA-C02: What is the MOST operationally efficient solution to track expenditures for EC2 and RDS within AWS

Question

A company wants to track its expenditures for Amazon EC2 and Amazon RDS within AWS. The company decides to implement more rigorous tagging requirements for resources in its AWS accounts. A SysOps administrator needs to identify all noncompliant resources. What is the MOST operationally efficient solution that meets this requirement?

A. Create a rule in Amazon EventBridge that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
B. Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
C. Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.
D. Create a rule in Amazon EventBridge with a managed rule to evaluate all created or updated resources for the specified tags.

Answer

C. Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.

Explanation

The correct answer is C. Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. It can help you to track changes, monitor compliance, and troubleshoot issues. AWS Config also provides a set of predefined rules, called managed rules, that can check whether your resources comply with common best practices and standards. One of these managed rules is the required-tags rule, which checks whether your resources have the tags that you specify. You can use this rule to identify all noncompliant resources that do not have the required tags.

To use this rule, you need to create a rule in AWS Config and select the required-tags rule from the list of managed rules. You also need to specify the tag keys and values that you want to check for, as well as the resource types that you want to evaluate. You can also configure other settings, such as the frequency of evaluation, the remediation action, and the notifications. Once you create the rule, AWS Config will start evaluating your resources and report the compliance status in the AWS Config console or API.

This solution is the most operationally efficient one, as it does not require you to write any custom code or use any additional services. It also leverages the existing functionality and scalability of AWS Config and its managed rules.

The other options are not correct for the following reasons:

A. Create a rule in Amazon EventBridge that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.

This option is not operationally efficient, as it requires you to write and maintain a custom Lambda function that will perform the tag evaluation logic. It also does not cover all existing resources, only those that are created or updated after the rule is created. Moreover, it does not leverage the existing functionality and scalability of AWS Config and its managed rules.

B. Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.

This option is not operationally efficient, as it requires you to write and maintain a custom Lambda function that will perform the tag evaluation logic. It also does not leverage the existing functionality and scalability of AWS Config and its managed rules, especially the required-tags rule that already does what you need.

D. Create a rule in Amazon EventBridge with a managed rule to evaluate all created or updated resources for the specified tags.

This option is not correct, as Amazon EventBridge does not provide any managed rules for tag evaluation. Amazon EventBridge is a service that enables you to connect your applications with data from various sources, such as AWS services, SaaS applications, or custom applications. It can help you to trigger actions based on events, such as invoking Lambda functions, sending messages, or updating databases. However, it does not provide any built-in functionality for checking resource compliance or configuration.

Amazon AWS Certified SysOps Administrator – Associate certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Amazon AWS Certified SysOps Administrator – Associate exam and earn Amazon AWS Certified SysOps Administrator – Associate certification.

Alex Lim is a certified IT Technical Support Architect with over 15 years of experience in designing, implementing, and troubleshooting complex IT systems and networks. He has worked for leading IT companies, such as Microsoft, IBM, and Cisco, providing technical support and solutions to clients across various industries and sectors. Alex has a bachelor’s degree in computer science from the National University of Singapore and a master’s degree in information security from the Massachusetts Institute of Technology. He is also the author of several best-selling books on IT technical support, such as The IT Technical Support Handbook and Troubleshooting IT Systems and Networks. Alex lives in Bandar, Johore, Malaysia with his wife and two chilrdren. You can reach him at [email protected] or follow him on Website | Twitter | Facebook

    Ads Blocker Image Powered by Code Help Pro

    Your Support Matters...

    We run an independent site that is committed to delivering valuable content, but it comes with its challenges. Many of our readers use ad blockers, causing our advertising revenue to decline. Unlike some websites, we have not implemented paywalls to restrict access. Your support can make a significant difference. If you find this website useful and choose to support us, it would greatly secure our future. We appreciate your help. If you are currently using an ad blocker, please consider disabling it for our site. Thank you for your understanding and support.