AWS Solutions Architect Associate
136 incident response problems that help with AWS Solutions Architect Associate prep.
먼저 읽을 가이드
추천 문제
All problems (136)
SECURITY-039S3 server access log archive fails after object ownership policy changedCentral logging was working until bucket ownership controls changed, and now write attempts fail even though the destination bucket still exists and the prefix is correct.SecurityIntermediate19 minFreeCICD-070Static asset deploy uploads precompressed files without Content-Encoding metadataThe release finishes green, but browsers download broken assets because the object metadata no longer matches the precompressed files uploaded by the pipeline.CI/CDIntermediate16 minFreeSECURITY-076EKS IRSA token file becomes unreadable after a sidecar changes the shared volume ownershipThe role mapping is correct, but the application cannot assume it because the projected token path no longer matches the runtime user permissions after a sidecar update.SecurityIntermediate17 minFreeCICD-056CloudFront invalidation runs before the new asset manifest is fully publishedThe deployment pipeline clears the CDN correctly, but users still receive broken bundles because the invalidation precedes the final asset upload and manifest sync.CI/CDIntermediate18 minFreeK8S-072ExternalDNS updates the wrong hosted zoneDNS automation is healthy, but one record lands in the wrong zone because two matching filters and ownership assumptions overlap in a way the operator did not expect.KubernetesIntermediate18 minFreeSECURITY-036IMDSv1 remains reachable on a standby node after hardening rolloutPrimary instances were hardened correctly, but a rarely used standby or replacement path still exposes the older metadata service behavior.SecurityIntermediate18 minFreeCICD-030Release note generation fails on shallow clone runnersRelease note generation fails on shallow clone runners is a hands-on troubleshooting drill. A changelog step depends on full git history, but shallow checkout settings hide the required tags and commits. GitHub GitHub Actions Workflows needs to be checked by narrowing scope, r...CI/CDIntermediate18 minFreeCICD-027Environment variable masking hides the real failing commandEnvironment variable masking hides the real failing command is a hands-on troubleshooting drill. A secret redaction rule removes the useful part of the error message, making the build logs look empty. GitHub GitHub Actions Workflows needs to be checked by narrowing scope, rece...CI/CDBeginner15 minFreeK8S-024Pod restartsThe file exists and the volume is mounted, but the runtime user cannot read the config because the mode is too strict.KubernetesBeginner15 minFreeCICD-014The test report is generated, but the upload path differs so the quality gate is emptyThe test report is generated, but the upload path differs so the quality gate... is a hands-on troubleshooting drill. Covers a situation where a single artifact path typo drops the quality metric yet the pipeline still passes. GitHub GitHub Actions Workflows needs to be checke...CI/CDBeginner15 minFreeK8S-027Secret key name changed but envFrom stays silentThe pod starts, but the expected environment variable never appears because the secret key no longer matches application expectations.KubernetesBeginner14 minFreeK8S-002Analyzing a service failure where the Pod is Running but receives no trafficA scenario for step-by-step checking of Service, Endpoint, readiness probe, and selector mismatch possibilities.KubernetesIntermediate22 minProCICD-016Missing feature-flag verification exposes inactive code directly in productionMissing feature-flag verification exposes inactive code directly in production is a hands-on troubleshooting drill. Tracks a feature-flag operations gap that was in the release plan but missing from the actual verification flow. GitHub Actions Workflows needs to be checked by...CI/CDAdvanced23 minProK8S-013Node draining takes longer than expectedA scenario that narrows down the root cause, centered on designing the balance between high availability and operational convenience, in the situation of node draining taking longer than expected because of a PodDisruptionBudget.KubernetesAdvanced25 minProCICD-015During parallel deploys, the staging cache bleeds into production tooDuring parallel deploys, the staging cache bleeds into production too is a hands-on troubleshooting drill. Covers an incident where a shared cache key with no environment separation lets staging results affect production. GitHub GitHub Actions Workflows needs to be checked by...CI/CDIntermediate20 minProCICD-012Tests pass but the migration order is wrong, causing an incident right after deployTests pass but the migration order is wrong, causing an incident right is a hands-on troubleshooting drill. Covers an incident caused by the application deploy and database schema change happening in the wrong order. GitHub GitHub Actions Workflows needs to be checked by narro...CI/CDIntermediate24 minProCICD-013Cache hits in a multi-stage Docker build but a vulnerable layer remainsCache hits in a multi-stage Docker build but a vulnerable layer remains is a hands-on troubleshooting drill. A situation where an old base layer remains during build-speed optimization, causing a security patch to be missed. GitHub Actions Workflows needs to be checked by narr...CI/CDAdvanced26 minProK8S-015After adding a NetworkPolicy, only the observability agent cannot communicateA situation where the main services are fine but only the monitoring agent is blocked, making incident diagnosis harder.KubernetesAdvanced27 minProCICD-010GitOps sync repeatedly failing due to a Helm values merge mistakeGitOps sync repeatedly failing (Rollout Stuck) is a hands-on troubleshooting drill. Covers a problem where per-environment values overlays get tangled and the GitOps tool keeps detecting drift. GitHub GitHub Actions Workflows needs to be checked by narrowing scope, recent chan...CI/CDAdvanced27 minProCICD-019In a blue-green deploy, traffic is switched but the background worker stays on the old versionA situation where success was judged from the web-traffic switch alone, but the async worker remained on the previous version.CI/CDAdvanced28 minPro