Answer-first summary for fast verification
Answer: Set up Amazon VPC IP Address Manager (IPAM) with a new top-level pool. In the top-level pool, create a pool for each VPC. In each VPC pool, create a pool for each subnet in that VPC. Turn on the auto-import option for the VPC pools and the subnet pools. Configure an Amazon CloudWatch alarm to send an Amazon Simple Notification Service (Amazon SNS) notification if the availability limit threshold is reached.
The question revolves around monitoring IP address usage across resources in VPCs to prevent IP address exhaustion events. The solution must provide notifications before an incident occurs, with the least operational overhead. Option A suggests using Amazon VPC IP Address Manager (IPAM) with auto-import for VPC and subnet pools, combined with a CloudWatch alarm for notifications. This solution leverages AWS managed services to automate the monitoring and notification process, reducing operational overhead. Option B involves setting up a log group for each subnet and using a Lambda function to publish metrics, which introduces more complexity and operational overhead. Option C also involves a custom solution with a Lambda function and CloudWatch metrics, which, while effective, requires more setup and maintenance than a managed service. Option D is similar to A but uses Amazon EventBridge for monitoring, which is also a managed service but might introduce unnecessary complexity for this specific requirement. Therefore, Option A is the most straightforward and least operationally intensive solution.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
A company faced an IP address exhaustion issue in its VPCs, impacting service capacity. The VPCs contain multiple subnets spread across different Availability Zones. A network engineer must implement a solution to monitor IP address usage across VPC resources and provide notifications for potential issues, enabling proactive action before incidents occur. Which solution meets these requirements with minimal operational overhead?
A
Set up Amazon VPC IP Address Manager (IPAM) with a new top-level pool. In the top-level pool, create a pool for each VPC. In each VPC pool, create a pool for each subnet in that VPC. Turn on the auto-import option for the VPC pools and the subnet pools. Configure an Amazon CloudWatch alarm to send an Amazon Simple Notification Service (Amazon SNS) notification if the availability limit threshold is reached.
B
Set up a log group in Amazon CloudWatch Logs for each subnet. Create an AWS Lambda function that reads each subnet's IP address usage and publishes metrics to the log group. Configure an Amazon CloudWatch alarm to send an Amazon Simple Notification Service (Amazon SNS) notification if the availability limit threshold is reached.
C
Set up a custom Amazon CloudWatch metric for IP address usage for each subnet. Create an AWS Lambda function that reads each subnet's IP address usage and publishes a CloudWatch metric dimension. Schedule the Lambda function to run every 5 minutes. Configure a CloudWatch alarm to send an Amazon Simple Notification Service (Amazon SNS) notification if the availability limit threshold is reached.
D
Set up Amazon VPC IP Address Manager (IPAM) with a new top-level pool. In the top-level pool, create a pool for each VPC. In each VPC pool, create a pool for each subnet in that VPC. Turn on the auto-import option for the VPC pools and the subnet pools. Configure an Amazon EventBridge rule that monitors each pool availability limit threshold and sends an Amazon Simple Notification Service (Amazon SNS) notification if the limit threshold is reached.