Amazon Web Services DOP-C02 Exam With Confidence Using Practice Dumps

Step 1: Storing Docker Images in Amazon ECRDocker images can be large, and storing them in a centralized, scalable location can greatly reduce build times. Amazon Elastic Container Registry (ECR) is a fully managed container registry that stores, manages, and deploys Docker container images.

Action: Store the Docker images in an ECR repository.

Why: Storing Docker images in ECR ensures that Docker images can be reused across multiple builds, improving build performance by avoiding the need to rebuild the images from scratch.

Comprehensive and Detailed Explanation From Exact Extract of DevOps Engineer documents only:

The requirement is to log and analyze Kubernetes control plane activity, including API requests, and to monitor container performance on the worker nodes with the least operational overhead.

Option B is correct because:

Amazon EKS control plane logging can send control plane logs, including API server logs, to Amazon CloudWatch.

CloudWatch Container Insights provides monitoring and performance visibility for containers, pods, nodes, and clusters.

CloudWatch Logs Insights can be used to query and analyze both control plane and node-related logs.

This is the most managed and lowest-overhead solution among the options.

Why the other options are incorrect:

A. CloudTrail is not the primary solution for Kubernetes control plane logs such as API server logs, and deploying Logstash increases operational overhead significantly.

C. Sending logs to Amazon S3 and analyzing them with Athena and QuickSight is more operationally complex and less direct than using native CloudWatch integrations.

D. AWS Distro for OpenTelemetry with Firehose and Redshift adds substantial complexity and operational overhead compared to native EKS and CloudWatch capabilities.

Using CodePipeline + CodeConnections Git repo provides version control, automated deployment, and rollback. Each template includes AWS::ControlTower::EnableControl for OU-level guardrails. AWS Control Tower documentation recommends this GitOps automation model.