Q: What is AWS Config and how does it differ from CloudTrail?
- CloudTrail — records API actions. "What happened?" Who called ec2:TerminateInstances?
#AWS #Cost & Architecture #L2 #Cloud #Infrastructure #EC2
🎙️ Candidate Opening & Architectural Context
""When an interviewer asks how I troubleshoot this in AWS, I frame it through my hands-on production experience. When addressing this question, I walk the interviewer through our production incident runbook: isolating the blast radius, checking diagnostic logs and metrics, and applying a safe fix.""
Advertisement
🛠️ Production Runbook & Step-by-Step Resolution
1️⃣
Initial Diagnostics & Root Cause Analysis
Config continuously records resource configurations and changes. You can query: "Show me the configuration of this S3 bucket 30 days ago."
- CloudTrail — records API actions. "What happened?" Who called
ec2:TerminateInstances? - AWS Config — records the state of your resources over time. "What does my infrastructure look like?" What was the Security Group configuration on Jan 1st?
2️⃣
Remediation & Permanent Safeguards
Config Rules let you define compliance checks: "All S3 buckets must have encryption enabled." Config evaluates and marks non-compliant resources. Use both together for full audit trail: Config for state, CloudTrail for actions. --- Q47-Q100 — Rapid-fire AWS Scenarios
💡 The Senior SRE Gold Nugget (Key Architectural Takeaway)
"Pro-Tip: CloudTrail — records API actions. "What happened?" Who called ec2:TerminateInstances?."
⚡ 60-Second Elevator Pitch Talking Points
- CloudTrail — records API actions. "What happened?" Who called ec2:TerminateInstances?
- AWS Config — records the state of your resources over time. "What does my infrastructure look lik...
Advertisement