Parameters for customization in AWS - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Parameter Store usage in AWS

Which of the following best describes the primary purpose of AWS Systems Manager Parameter Store?

A It stores and manages configuration data and secrets centrally for your applications.

B It is used to deploy EC2 instances automatically.

C It monitors network traffic between AWS services.

D It provides a database service for storing application data.

💡 Hint

Think about a service that helps keep configuration and secrets safe and easy to update.

AWS Systems Manager Parameter Store is designed to store configuration data and secrets centrally, so applications can retrieve them securely and consistently.

❓ Configuration

intermediate

Using CloudFormation Parameters for customization

Given the following CloudFormation snippet, what will be the value of the InstanceType property if the stack is launched without specifying any parameter overrides?

{
  "Parameters": {
    "InstanceTypeParam": {
      "Type": "String",
      "Default": "t3.micro",
      "AllowedValues": ["t3.micro", "t3.small", "t3.medium"]
    }
  },
  "Resources": {
    "MyEC2Instance": {
      "Type": "AWS::EC2::Instance",
      "Properties": {
        "InstanceType": { "Ref": "InstanceTypeParam" },
        "ImageId": "ami-0abcdef1234567890"
      }
    }
  }
}

A t3.small

B t3.medium

C No value, stack creation will fail

D t3.micro

💡 Hint

Check the default value defined in the parameter section.

If no parameter override is provided, CloudFormation uses the default value specified in the parameter definition.

❓ Architecture

advanced

Designing parameter usage for multi-environment deployment

You want to deploy the same CloudFormation template to multiple environments (dev, test, prod) with different database endpoints. Which approach best uses parameters to achieve this?

A Define a parameter for the database endpoint with no default, and provide the endpoint value during stack creation for each environment.

B Use a single parameter with a default value set to the production database endpoint for all environments.

C Hardcode the database endpoint in the template for each environment and create separate templates.

D Use environment variables on the EC2 instance to set the database endpoint instead of parameters.

💡 Hint

Think about flexibility and reusability of the template across environments.

Using a parameter without a default forces you to provide the correct database endpoint per environment, making the template reusable and environment-specific.

❓ security

advanced

Securing sensitive parameters in AWS Systems Manager Parameter Store

Which option correctly describes how to securely store a database password in AWS Systems Manager Parameter Store?

A Store the password in an S3 bucket with public read access.

B Store the password as a String parameter and share the parameter ARN publicly.

C Store the password as a SecureString parameter encrypted with a KMS key and restrict access via IAM policies.

D Store the password in plain text in a String parameter and encrypt it manually in the application.

💡 Hint

Consider encryption and access control best practices.

SecureString parameters use encryption with AWS KMS and access can be controlled with IAM policies, ensuring the password is protected.

❓ service_behavior

expert

Behavior of parameter versioning in AWS Systems Manager Parameter Store

You update a SecureString parameter in AWS Systems Manager Parameter Store multiple times. What happens to the parameter versions and how can you retrieve the previous version?

A Each update overwrites the existing version; previous versions are lost and cannot be retrieved.

B Each update creates a new version number; you can retrieve previous versions by specifying the version number in the API call.

C Parameter Store keeps only the latest two versions; older versions are automatically deleted.

D Parameter versions are not tracked; you must manually backup parameter values to keep history.

💡 Hint

Think about version control and retrieval capabilities of Parameter Store.

Parameter Store assigns a new version number for each update and allows retrieval of previous versions by specifying the version number.