A company wants to automatically re-create its infrastructure using AWS CloudFormation as part of the company's quality assurance (QA) pipeline. For each QA run, a new VPC must be created in a single account, resources must be deployed into the VPC, and tests must be run against this new infrastructure. The company policy states that all VPCs must be peered with a central management VPC to allow centralized logging. The company has existing CloudFormation templates to deploy its VPC and associated resources. Which combination of steps will achieve the goal in a way that is automated and repeatable? (Choose two.)
A) Create an AWS Lambda function that is invoked by an Amazon CloudWatch Events rule when a CreateVpcPeeringConnection API call is made. The Lambda function should check the source of the peering request, accepts the request, and update the route tables for the management VPC to allow traffic to go over the peering connection.
B) In the CloudFormation template: Invoke a custom resource to generate unique VPC CIDR ranges for the VPC and subnets. Create a peering connection to the management VPC. Update route tables to allow traffic to the management VPC.
C) Use the Fn::Cidr function to allocate an unused CIDR range for the VPC and subnets.
D) Modify the CloudFormation template to include a mappings object that includes a list of /16 CIDR ranges for each account where the stack will be deployed.
E) Use CloudFormation StackSets to deploy the VPC and associated resources to multiple AWS accounts using a custom resource to allocate unique CIDR ranges. Create peering connections from each VPC to the central management VPC and accept those connections in the management VPC.
Correct Answer:
Verified
Q353: A DevOps engineer wants to find a
Q354: A company's web application will be migrated
Q355: A DevOps Engineer is launching a new
Q356: A company has thousands of Amazon EC2
Q357: A development team is using AWS CodeCommit
Q359: A DevOps engineer has automated a web
Q360: A company wants to use AWS CloudFormation
Q361: An ecommerce company is receiving reports that
Q362: A company's legacy application uses IAM user
Q363: Your development team wants account-level access to
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents