DOP-C02 Question 340
Single answerYour team manages a CI/CD pipeline deployed on AWS, which uses AWS CodePipeline, AWS CodeBuild, and Amazon S3. Recently, the deployment process has been failing intermittently, and the error messages indicate that some files are missing in the S3 bucket used as the CodePipeline source stage. Which approach will most effectively help you identify the root cause of this issue?
- A
Enable AWS CloudTrail logs for the S3 bucket and analyze the API activity to identify any unauthorized deletions or modifications.
- B
Increase the timeout for the CodePipeline source stage to prevent transient errors caused by delays in file uploads.
- C
Enable AWS Config to track changes in the S3 bucket configuration and identify any compliance issues.
- D
Set up Amazon CloudWatch Alarms on the S3 bucket to monitor its storage size and trigger an alert if files are deleted.
Show answer and explanation
Correct answer: A
Explanation
To identify the root cause of missing files in the S3 bucket, analyzing access patterns and API activity is critical. AWS CloudTrail provides detailed logging of all API calls made to the S3 bucket, including information about who or what accessed or modified the files and when the activity occurred. This makes it the most effective tool for root cause analysis in this scenario.
- A. Correct.
This is the correct answer. AWS CloudTrail logs capture API activity for S3, allowing you to trace which user or process interacted with the bucket and possibly deleted or modified the files. This provides detailed insights into the root cause of the issue.
- B. Incorrect.
This is incorrect. Increasing the timeout for the CodePipeline source stage does not address the root cause of missing files in the S3 bucket. This approach assumes a delay in file uploads, which is not indicated as the issue here.
- C. Incorrect.
This is incorrect. While AWS Config can track configuration changes, it does not provide detailed file-level insight into who or what may have deleted or modified files in the S3 bucket.
- D. Incorrect.
This is incorrect. CloudWatch Alarms on S3 bucket size can alert you to changes in storage, but they do not provide information about the root cause or specific details of file deletion or modification.