AWS Certified Database – Specialty — Question 258

A company needs to deploy an Amazon Aurora PostgreSQL DB instance into multiple accounts. The company will initiate each DB instance from an existing Aurora PostgreSQL DB instance that runs in a shared account. The company wants the process to be repeatable in case the company adds additional accounts in the future. The company also wants to be able to verify if manual changes have been made to the DB instance configurations after the company deploys the DB instances.

A database specialist has determined that the company needs to create an AWS CloudFormation template with the necessary configuration to create a DB instance in an account by using a snapshot of the existing DB instance to initialize the DB instance. The company will also use the CloudFormation template's parameters to provide key values for the DB instance creation (account ID, etc.).

Which final step will meet these requirements in the MOST operationally efficient way?

Answer options

• A. Create a bash script to compare the configuration to the current DB instance configuration and to report any changes.
• B. Use the CloudFormation drift detection feature to check if the DB instance configurations have changed.
• C. Set up CloudFormation to use drift detection to send notifications if the DB instance configurations have been changed.
• D. Create an AWS Lambda function to compare the configuration to the current DB instance configuration and to report any changes.

Correct answer: B

Explanation

The correct answer, B, is the most operationally efficient way to use CloudFormation's drift detection feature to identify changes to the DB instance configurations. Options A and D involve manual scripts or functions that may not be as efficient for ongoing monitoring, while option C adds unnecessary complexity by incorporating notifications, which is not required for the basic verification of changes.