ANS-C01 Question 314
Single answerYour company requires an automated solution for managing and deploying changes to its Amazon Virtual Private Cloud (VPC) network infrastructure. The solution must include the creation and modification of VPCs, subnets, route tables, and security groups, while ensuring version control and minimizing human errors. Which approach should you choose to meet these requirements?
- A
Use AWS Management Console to manually create and update the network infrastructure.
- B
Utilize AWS CloudFormation templates to define and deploy the network infrastructure as code.
- C
Write custom Python scripts using the AWS SDK (Boto3) to automate the creation and management of network resources.
- D
Leverage Amazon EC2 Auto Scaling to create and manage VPCs and associated resources automatically.
Show answer and explanation
Correct answer: B
Explanation
AWS CloudFormation is the best solution for automating and configuring network infrastructure in this scenario. It allows you to use templates to define network resources such as VPCs, subnets, route tables, and security groups. This approach ensures repeatability, version control, and minimizes human errors, aligning perfectly with the requirements in the question.
- A. Incorrect.
Using the AWS Management Console is a manual approach and does not provide automation or version control. This does not meet the requirements for automation and minimizing errors.
- B. Correct.
AWS CloudFormation enables infrastructure as code, allowing you to define, deploy, and manage network resources in a repeatable and automated manner. It supports version control and ensures consistency, making it the ideal solution.
- C. Incorrect.
While writing custom Python scripts using Boto3 can automate tasks, it requires more effort to manage, maintain, and handle version control compared to AWS CloudFormation. It is not the most efficient solution for this scenario.
- D. Incorrect.
Amazon EC2 Auto Scaling is for automatically scaling EC2 instances and does not manage network infrastructure like VPCs, subnets, or route tables. Therefore, it is not suitable for this use case.