AWS Certified SysOps Administrator – Associate (legacy) — Question 728

Your mission is to create a lights-out datacenter environment, and you plan to use AWS OpsWorks to accomplish this. First you created a stack and added an App
Server layer with an instance running in it. Next you added an application to the instance, and now you need to deploy a MySQL RDS database instance.
Which of the following answers accurately describe how to add a backend database server to an OpsWorks stack? (Choose three.)

Answer options

• A. Add a new database layer and then add recipes to the deploy actions of the database and App Server layers.
• B. Use OpsWorks' "Clone Stack" feature to create a second RDS stack in another Availability Zone for redundancy in the event of a failure in the Primary AZ. To switch to the secondary RDS instance, set the [:database] attributes to values that are appropriate for your server which you can do by using custom JSON.
• C. The variables that characterize the RDS database connectionג€"host, user, and so onג€"are set using the corresponding values from the deploy JSON's [:depioy][:app_name][:database] attributes.
• D. Cookbook attributes are stored in a repository, so OpsWorks requires that the "password": "your_password" attribute for the RDS instance must be encrypted using at least a 256-bit key.
• E. Set up the connection between the app server and the RDS layer by using a custom recipe. The recipe configures the app server as required, typically by creating a configuration file. The recipe gets the connection data such as the host and database name from a set of attributes in the stack configuration and deployment JSON that AWS OpsWorks installs on every instance.

Correct answer: A, C, E

Explanation

To integrate an Amazon RDS database with an AWS OpsWorks stack, you must add a database layer and use custom recipes to configure the connection on the application servers (Option A and E). AWS OpsWorks automatically populates the stack configuration and deployment JSON with the database connection details under the [:deploy][:app_name][:database] attributes, which the recipes can query (Option C). OpsWorks does not enforce 256-bit key encryption for passwords in cookbooks (Option D), nor is cloning the entire stack the standard method for configuring RDS high availability (Option B).