In order to be compliant with corporate regulatory requirements, any changes to the AWS resource configurations need to be traced and documented. Which of the following actions belong to the best practices for the implementation of Infrastructure as Code? (Select TWO.)

Answer options:

A.A developer uses AWS CLI commands on his Linux PC to configure a VPC, including public subnets, private subnets and a bastion host.
B.For disaster recovery purposes, a CloudFormation template is used to build a replica of a production environment in another AWS region.
C.Create VPC peering between two VPCs so that instances in either VPC can communicate with each other privately.
D.In the AWS console, activate the versioning for S3 buckets so that every object stored in the S3 buckets is version controlled.
E.In AWS System Manager “Run Command”, create a JSON command document to run a health check for EC2 instances. Save the document in a Git repository.

Correct Answer – B, E
Refer to https://d1.awsstatic.com/whitepapers/DevOps/infrastructure-as-code.pdf for how to implement Infrastructure as Code in AWS.
Option A is incorrect: Because a script or a template is needed to record the AWS CLI commands so that the changes to the VPC configurations are saved via code.
Option B is CORRECT: Because CloudFormation is a best practice for resource provisioning. The same template can be used to create the same set of resources when needed repeatedly.
Option C is incorrect: Because it does not mention how to create the VPC peering. If it is done directly in the AWS console, it is not compliant with the regulatory requirements.
Option D is incorrect: Because the activation of versioning in S3 should be done via tools such as CloudFormation so that this operation is recorded in code.
Option E is CORRECT: Because the JSON command document contains parameters and actions for Systems Manager. This customized document can be reused and version controlled in Git.