Cloudformation Hooks

[Chris Dinneen]

Hi Team,

One of the questions in the practice exam is talking about enforcing the encryption of EBS volumes at an organization level. One of the correct answers is

Use CloudFormation hooks to trigger a Lambda function that encrypts all EBS volumes using KMS whenever a CloudFormation stack is created.”

This answer is not correct. Cloud-formation hooks are run before the stack is created to validate that the resources within the stack is compliant with all the hooks. If they are not, the stack creation will be failed. Cloud formation hooks cannot encrypt EBS volumes after the creation of the resource.

The correct answer should be something like: “Use CloudFormation hooks to trigger a Lambda function that verifies that all
EBS volumes are encrypted using KMS and if not, fail the stack creation.”

• This discussion was modified 1 week, 1 day ago by  Chris Dinneen.

[JR-TutorialsDojo]

Hello Chris Dinneen,

Thank you for bringing this to our attention, and we apologize for any confusion this may have caused. We acknowledge that this question requires an update. The necessary changes will be made and should be reflected on the portal soon.

Let us know if you need further assistance.

Regards,
JR @ Tutorials Dojo

[Chris Dinneen]

Thanks for the response! I appreciate the commitment to excellence and continuing improvement.

[JR-TutorialsDojo]

We’re glad to hear you value the commitment to continuous improvement, and we’ll continue refining the material to better support learners preparing for exams. Please don’t hesitate to reach out if you spot anything else or have suggestions for further enhancements.