DOP-C02 Question 97
Select 3Your company uses AWS CloudFormation as its primary Infrastructure as Code (IaC) solution. The team wants to implement a change management process to ensure that infrastructure updates are thoroughly reviewed and validated before deployment, minimizing the risk of outages. Which combination of approaches should you implement to create a robust change management process?
- A
Use Change Sets in CloudFormation to preview proposed changes before applying them.
- B
Implement an automated pipeline with a manual approval stage to review infrastructure changes.
- C
Deploy infrastructure updates directly to the production environment to save time and streamline the process.
- D
Utilize version control for CloudFormation templates and enforce pull requests for all changes.
- E
Disable rollback on failure to identify issues faster while deploying changes.
Show answer and explanation
Correct answers: A, B, D
Explanation
A robust change management process for IaC-based platforms like AWS CloudFormation should combine multiple practices to ensure safety, validation, and accountability. Using Change Sets allows you to preview changes before applying them, while automated pipelines with manual approvals add a layer of governance. Version control with enforced pull requests ensures peer review and traceability for all changes. Avoiding practices like direct production updates and disabling rollbacks helps mitigate risks and maintain infrastructure consistency.
- A. Correct.
Correct: Using Change Sets in CloudFormation allows you to preview and understand the impact of resource changes before applying them, which is crucial for a safe and controlled change management process.
- B. Correct.
Correct: An automated pipeline with a manual approval stage ensures that changes are reviewed by designated stakeholders, adding an additional layer of validation and reducing the likelihood of introducing errors.
- C. Incorrect.
Incorrect: Deploying updates directly to production without testing or review contradicts change management best practices and increases the risk of outages or misconfigurations.
- D. Correct.
Correct: Version control for CloudFormation templates, combined with enforced pull requests, ensures that all changes are peer-reviewed and tracked, aligning with DevOps best practices for change management.
- E. Incorrect.
Incorrect: Disabling rollback on failure increases the risk of leaving the infrastructure in an inconsistent state if something goes wrong, which is not recommended in a robust change management process.