Review questions
- You are working as a DevOps engineer at a company that has implemented multiple CI/CD pipelines. One pipeline is used to push out the application code and its features. Another pipeline is used to update the underlying infrastructure and security settings of the account. After the last set of security group updates for the application, all the users at one of the company's remote offices can no longer access the instances in the autoscaling group. These users can still access the application from the web protocol via the Elastic Load Balancer. These users contain members of multiple IAM groups, including developers, power users, and even an administrator. Where can you go for information to try and find out where the issue is occurring?
a. Gather the IAM usernames that have been denied access. Use these usernames to search through the IAM log group in CloudWatch.
b. Make sure that VPC Flow Logs have been turned on. Search the VPC Flow Logs for both the internal...