AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
A CloudOps engineer monitors production Amazon EC2 instances with a CloudWatch alarm named DiskSpaceLow. The alarm changes to ALARM when the disk_used_percent metric on any instance exceeds 85 percent. A remediation shell script has already been packaged as an AWS Systems Manager Automation runbook. The engineer must ensure that the script executes automatically on the affected instance whenever the alarm enters ALARM, while keeping operational effort to a minimum and without adding new software to the instances. Which approach meets these requirements?
Install a cron job on every instance that polls the disk_used_percent metric with the CloudWatch GetMetricData API and executes the script locally when the threshold is breached.
Create an Amazon EventBridge rule that filters for the DiskSpaceLow alarm changing to ALARM and sets the Systems Manager Automation runbook as the target, passing the instance ID as a runbook parameter.
Configure a Lambda function subscribed to the alarm's SNS notification; have the function call the Systems Manager SendCommand API to run the script on the instance.
Add the instances to an AWS OpsWorks stack and configure a deploy lifecycle event to run the script; trigger an OpsWorks deployment each time the alarm enters ALARM.
An Amazon EventBridge rule can be configured to listen for the specific CloudWatch alarm state-change event that signals the transition to ALARM. EventBridge natively supports AWS Systems Manager Automation as a target, so the rule can directly invoke the existing runbook and pass the impacted instance ID as a parameter. This provides fully managed, event-driven remediation with no additional code or instance modifications.
Using a Lambda function that subscribes to an SNS topic introduces and must maintain extra compute resources and IAM permissions. Polling CloudWatch metrics from a cron job on every instance is operationally heavy and inefficient. OpsWorks lifecycle events are intended for configuration and deployment activities, and using them would require creating and managing an additional service that adds unnecessary complexity.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Amazon EventBridge and how does it work in this solution?
Open an interactive chat with Bash
What are AWS Systems Manager Automation runbooks and why are they used here?
Open an interactive chat with Bash
Why isn’t a Lambda function or cron job suitable in this case?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Deployment, Provisioning, and Automation
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .