Certification942 problems· 22 reviewed

AWS DevOps Engineer Professional

942 incident response problems that help with AWS DevOps Engineer Professional prep.

All problems (942)

CICD-1280An artifact upload succeeds but the next matrix phase downloads the wrong oneA multi-env build and deploy flow looks fine in GitHub Actions, but staging and production artifacts are easy to confuse by name.CI/CDIntermediate15 minProCICD-120Release note automation rewrites the semantic version tag into a prerelease suffix and downstream promotion logic refuses the artifactThe published artifact exists, but the promotion controller rejects it because the computed version string no longer matches the expected stable pattern.CI/CDAdvanced15 minProCICD-1259setup-python works on hosted runners but fails on a self-hosted MacA self-hosted macOS runner starts failing only on language setup steps after an upgrade or user switch.CI/CDIntermediate15 minProCICD-134A dependency proxy serves a cached package manifest after the source package was revoked, and downstream builds keep resolving the unsafe versionUpstream fixed the issue, but the local acceleration layer preserved the vulnerable metadata view.CI/CDIntermediate16 minProCICD-1237A deployment gate reads the changelog successfully but still blocksA release pipeline derives approval logic from generated change metadata and later blocks only on unusually large releases.CI/CDIntermediate16 minProCICD-1284A deployment job can push images but cannot update the registry cacheA team adds registry-backed Buildx caching and only the cache step begins failing while the ordinary push still works.CI/CDIntermediate16 minProCICD-144A merge queue rebases the branch after tests pass, but the artifact fingerprint still reflects the pre-rebase commit and provenance checks reject the releaseThe code intent did not change much, yet artifact identity no longer matches the merge result the repository now points at.CI/CDIntermediate16 minProCICD-1232A monorepo path filter looks correct but one shared library change never triggers the deployA shared module changes and downstream services keep serving old logic because their deploy workflow never re-ran.CI/CDIntermediate16 minProCICD-369A preview environment uses feature flags from production defaults and hides one missing secret until the production rollout toggles the path live during a staged decommissionLower environments looked clean only because the risky path never became active there. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.CI/CDIntermediate16 minProCICD-210A release exception is approved while its audit evidence never reaches the archive during a failover rehearsalOperations can continue in the moment, yet the governance record for why it happened is incomplete. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.CI/CDIntermediate16 minProCICD-1267A reusable workflow deploys correctly in the caller but silently loses its secret in the called workflowA team modularizes its deployment pipeline and later finds that the reusable workflow cannot access credentials that were available in the original monolithic version.CI/CDIntermediate16 minProCICD-1274A reusable workflow inherits the caller repository but not its permissions, so the deployment step fails after modularization even though the old monolithic job workedThe refactor succeeds syntactically, yet the new called workflow loses privileges because the permissions contract changed at the workflow-call boundary.CI/CDIntermediate16 minProCICD-1278A workflow can clone the main repo but submodule fetch still failsA monorepo with private submodules starts failing only after nested repositories are switched to SSH references.CI/CDIntermediate16 minProCICD-1257A workflow can run shell steps on a self-hosted runner but Docker actions failA team migrates to a self-hosted build host and discovers only Docker-backed actions fail while ordinary shell steps succeed.CI/CDIntermediate16 minProCICD-1252A workflow correctly generates the release notes but the approval gate still blocksA release gate depends on generated metadata and later blocks only after a change that moved the same content into a human-readable summary.CI/CDIntermediate16 minProCICD-1247A workflow summary renders the right markdown but the gate step still failsA team trusts the visible summary page and misses that the blocking gate is still reading an empty or truncated machine output channel.CI/CDIntermediate16 minProCICD-1229Deployment waits forever on required checksA workflow refactor adds matrix expansion and pull requests begin hanging on a required check that is technically present only under old naming.CI/CDIntermediate16 minProCICD-1239A branch deploy runs from the correct ref but publishes the wrong static bundleA matrix build produces multiple platform or environment bundles and one deployment job later downloads the wrong one under a reused artifact name.CI/CDIntermediate17 minProCICD-129A feature-flag migration job starts before the secret rollout reaches the canary pods, and the flag backend rejects the writesThe release order seems safe, yet one dependency chain still lags behind the job that assumes it is ready.CI/CDAdvanced17 minProCICD-1254A matrix build reports green but the deploy downloads the wrong packageA multi-platform or multi-region build fan-out completes and later one deployment installs the bundle from another variant.CI/CDIntermediate17 minPro