Topic 1 Question 298
3 つ選択A company has a web application that is hosted on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The EKS cluster runs on AWS Fargate that is available through an internet-facing Application Load Balancer.
The application is experiencing stability issues that lead to longer response times. A DevOps engineer needs to configure observability in Amazon CloudWatch to troubleshoot the issue. The solution must provide only the minimum necessary permissions.
Which combination of steps will meet these requirements?
Deploy the CloudWatch agent as a Kubernetes StatefulSet to the EKS cluster.
Deploy the AWS Distro for OpenTelemetry Collector as a Kubernetes DaemonSet to the EKS cluster.
Associate a Kubernetes service account with an IAM role by using IAM roles for service accounts in Amazon EKS. Use the CloudWatchAgentServerPolicy AWS managed policy.
Associate a Kubernetes service account with an IAM role by using IAM roles for service accounts in Amazon EKS. Use the CloudWatchAgentAdminPolicy AWS managed policy.
Configure an IAM OpenID Connect (OIDC) provider for the EKS cluster.
Enable EKS control plane logging for the EKS cluster.
ユーザの投票
コメント(5)
- 正解だと思う選択肢: ACF
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/deploy-container-insights-EKS.html
- No daemonsets for fargate
- CloudWatchAgentServerPolicy is correct
- controlplane logging
👍 5CHRIS127222222024/12/25 - 正解だと思う選択肢: BCE
B: AWS Distro for OpenTelemetry (ADOT) is the recommended solution for collecting metrics and traces from EKS clusters E: OIDC provider is required to use IRSA
A: Incorrect because For EKS on Fargate, ADOT is the recommended solution F: Incorrect because this alone won't provide the application-level observability needed
👍 4matt2002024/12/30 - 正解だと思う選択肢: ACF
Changed mind to ACF. Daemonsets arent supported on Fargate, B is not possible. https://docs.aws.amazon.com/eks/latest/userguide/fargate.html
👍 2jojewi81432025/02/16
シャッフルモード