ANS-C01 Question 321
Select 3You are designing a network infrastructure for a new application that requires multiple VPCs to communicate with each other. To ensure consistency, scalability, and repeatability, you decide to use Infrastructure as Code (IaC). Which of the following approaches would allow you to define, deploy, and manage the required VPCs and their interconnections using IaC?
- A
Use AWS CloudFormation templates to define VPCs and VPC peering connections.
- B
Leverage the AWS Cloud Development Kit (AWS CDK) to define the VPCs and their interconnections in a programming language of your choice.
- C
Manually create the VPCs via the AWS Management Console, then export the configuration as a CloudFormation template for reuse.
- D
Write a Python script using the AWS SDK (Boto3) to create the VPCs and establish their interconnections programmatically.
- E
Deploy VPCs using the AWS CLI and write an automation script to handle VPC peering connections.
Show answer and explanation
Correct answers: A, B, D
Explanation
Infrastructure as Code (IaC) enables consistent and automated resource provisioning. AWS CloudFormation, AWS CDK, and AWS SDKs like Boto3 are purpose-built to support IaC principles, allowing scalable and repeatable definitions of infrastructure. Manual interventions or the AWS CLI alone lack the structure and repeatability required for effective IaC implementation.
- A. Correct.
Correct: AWS CloudFormation allows you to define and deploy network resources, such as VPCs and VPC peering connections, in a declarative way using templates. This provides consistency and scalability.
- B. Correct.
Correct: AWS CDK enables you to define infrastructure as code using familiar programming languages, which can then be synthesized into CloudFormation templates for deployment.
- C. Incorrect.
Incorrect: While exporting a configuration as a CloudFormation template provides a starting point, this approach involves manual intervention and isn't a scalable or true IaC practice.
- D. Correct.
Correct: The AWS SDK (e.g., Boto3 for Python) allows programmatic creation and management of AWS resources, aligning with IaC principles by enabling automation and repeatability.
- E. Incorrect.
Incorrect: While the AWS CLI can be used for resource creation, it lacks the inherent structure or reusability found in tools like CloudFormation, CDK, or SDKs. An automation script can supplement it, but it’s not an ideal IaC solution.