Zero-downtime deployment pattern in Terraform - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ Architecture

intermediate

Identify the key component for zero-downtime deployment

In a zero-downtime deployment pattern using Terraform, which component is essential to ensure new versions of an application are deployed without interrupting user access?

A A load balancer that shifts traffic gradually between old and new instances

B A single server that is updated in place with the new version

C A database migration script that runs after deployment

D A manual switch to turn off the old version before starting the new one

💡 Hint

Think about how traffic can be managed to avoid downtime during deployment.

A load balancer that shifts traffic gradually allows new instances to start serving requests before old ones stop, preventing downtime.

❓ Configuration

intermediate

Terraform resource for blue-green deployment

Which Terraform resource configuration best supports a blue-green deployment to achieve zero downtime?

A Two separate sets of instances with a shared load balancer switching between them

B A single autoscaling group with rolling update enabled

C One instance updated directly with the new version

D A database resource with version control enabled

💡 Hint

Blue-green deployment involves running two environments simultaneously.

Two separate instance groups allow switching traffic between old and new versions without downtime.

❓ service_behavior

advanced

Effect of deployment strategy on user requests

During a zero-downtime deployment using a canary release strategy, what happens to user requests?

A All user requests are immediately routed to the new version

B A small percentage of user requests are routed to the new version while the rest go to the old version

C User requests are queued until the deployment finishes

D User requests are dropped during the deployment

💡 Hint

Canary releases test new versions with a subset of users first.

Canary releases route a small portion of traffic to the new version to monitor stability before full rollout.

❓ security

advanced

Security consideration in zero-downtime deployments

What is a critical security consideration when implementing zero-downtime deployments with multiple active environments?

A Using the same database credentials for both environments without rotation

B Disabling all firewalls during deployment to avoid blocking traffic

C Allowing unrestricted SSH access to all instances during deployment

D Ensuring both old and new environments have consistent security group rules and access controls

💡 Hint

Think about how security policies apply when two environments run simultaneously.

Consistent security rules prevent vulnerabilities during traffic shift between environments.

✅ Best Practice

expert

Terraform state management in zero-downtime deployments

Which Terraform state management practice is best to support zero-downtime deployments in a team environment?

A Manually merge state files after each deployment

B Store state files locally on each developer's machine

C Use remote state storage with locking to prevent concurrent changes

D Disable state locking to speed up deployments

💡 Hint

Consider how to avoid conflicts when multiple people deploy infrastructure.

Remote state with locking ensures only one deployment modifies infrastructure at a time, preventing errors.

Practice

1. What is the main goal of a zero-downtime deployment in Terraform?

easy

A. Manually switch traffic after deployment

B. Update applications without stopping them or causing downtime

C. Deploy new versions only during off-hours

D. Stop all running tasks before updating

Solution

1. Step 1: Understand zero-downtime deployment purpose

   Zero-downtime deployment means updating apps without stopping them or causing service interruptions.

2. Step 2: Compare options with this goal

   Only Update applications without stopping them or causing downtime describes updating without stopping or downtime, matching the goal.

3. Final Answer:

   Update applications without stopping them or causing downtime -> Option B

4. Quick Check:

   Zero-downtime = no stopping, no downtime [OK]

Hint: Zero downtime means no stopping or service interruption [OK]

Common Mistakes:

• Thinking deployment must stop all tasks
• Assuming manual traffic switch is required
• Believing updates only happen off-hours

2. Which Terraform setting helps control how many tasks run during an update for zero-downtime?

easy

A. min_healthy_percent

B. max_percent

C. desired_count

D. task_definition

Solution

1. Step 1: Identify settings related to task counts during update

   Terraform uses settings like max_percent and min_healthy_percent to control task numbers during deployment.

2. Step 2: Understand min_healthy_percent role

   min_healthy_percent ensures a minimum percentage of tasks stay healthy and running during updates, preventing downtime.

3. Final Answer:

   min_healthy_percent -> Option A

4. Quick Check:

   min_healthy_percent controls running tasks during update [OK]

Hint: min_healthy_percent keeps tasks running during updates [OK]

Common Mistakes:

• Confusing max_percent with min_healthy_percent
• Using desired_count which sets total tasks, not update behavior
• Selecting task_definition which defines task specs

3. Given this Terraform snippet for ECS service update:

deployment_minimum_healthy_percent = 75
deployment_maximum_percent = 200

What does this configuration ensure during deployment?

medium

A. Exactly 75 tasks run; maximum 200 tasks allowed

B. No new tasks start until all old tasks stop

C. Deployment stops 25% of tasks before starting new ones

D. At least 75% of tasks stay running; up to 200% tasks can run temporarily

Solution

1. Step 1: Interpret deployment_minimum_healthy_percent

   This means at least 75% of current tasks must stay healthy and running during deployment.

2. Step 2: Interpret deployment_maximum_percent

   This allows up to 200% of the desired tasks to run temporarily, enabling new tasks to start before old ones stop.

3. Final Answer:

   At least 75% of tasks stay running; up to 200% tasks can run temporarily -> Option D

4. Quick Check:

   Min healthy 75%, max 200% = safe rolling update [OK]

Hint: Min healthy % keeps tasks running; max % allows extra tasks [OK]

Common Mistakes:

• Thinking percentages mean exact task counts
• Assuming deployment stops tasks before starting new ones
• Confusing min and max percentages

4. You set deployment_minimum_healthy_percent = 100 and deployment_maximum_percent = 100 in Terraform for ECS service. What issue will this cause?

medium

A. Deployment will run twice the desired tasks temporarily

B. Deployment will succeed with zero downtime

C. Deployment will fail because no new tasks can start before old ones stop

D. Deployment will ignore these settings and use defaults

Solution

1. Step 1: Analyze min and max percent both at 100%

   Min healthy 100% means all old tasks must stay running; max 100% means no extra tasks can start.

2. Step 2: Understand deployment impact

   New tasks cannot start until old ones stop, but old ones cannot stop because min healthy is 100%, causing deployment to fail.

3. Final Answer:

   Deployment will fail because no new tasks can start before old ones stop -> Option C

4. Quick Check:

   Min 100% + Max 100% blocks rolling update [OK]

Hint: Min 100% and Max 100% blocks task replacement [OK]

Common Mistakes:

• Assuming deployment will succeed without downtime
• Thinking max 100% allows extra tasks
• Ignoring min healthy effect on stopping old tasks

5. You want to deploy a new version of your app with zero downtime using Terraform ECS service. Your desired task count is 4. Which configuration best supports zero-downtime deployment?

hard

A. deployment_minimum_healthy_percent = 75deployment_maximum_percent = 125

B. deployment_minimum_healthy_percent = 100deployment_maximum_percent = 100

C. deployment_minimum_healthy_percent = 50deployment_maximum_percent = 150

D. deployment_minimum_healthy_percent = 0deployment_maximum_percent = 200

Solution

1. Step 1: Evaluate each option for zero-downtime support

   deployment_minimum_healthy_percent = 50
deployment_maximum_percent = 150 allows only 50% healthy tasks, risking downtime. deployment_minimum_healthy_percent = 100
deployment_maximum_percent = 100 blocks new tasks starting before old stop. deployment_minimum_healthy_percent = 0
deployment_maximum_percent = 200 allows zero healthy tasks, risking downtime. deployment_minimum_healthy_percent = 75
deployment_maximum_percent = 125 keeps 75% healthy and allows 125% max tasks, enabling smooth rolling update.

2. Step 2: Choose best balance for zero-downtime

   deployment_minimum_healthy_percent = 75
deployment_maximum_percent = 125 ensures enough healthy tasks remain while allowing new tasks to start before old stop, supporting zero downtime.

3. Final Answer:

   deployment_minimum_healthy_percent = 75 and deployment_maximum_percent = 125 -> Option A

4. Quick Check:

   Min healthy 75% + max 125% = safe rolling update [OK]

Hint: Min healthy ~75% and max ~125% enable zero downtime [OK]

Common Mistakes:

• Choosing min healthy too low risking downtime
• Choosing min and max both 100% blocking updates
• Allowing zero healthy tasks during deployment