DOP-C02 Domain 4: Monitoring, Logging, and Incident Response

A DevOps engineer manages multiple accounts in AWS Organizations and must monitor selected service quotas daily in every account. Email alerts are required when usage reaches 80% of a quota. Which solution meets these requirements?

Multiple choice — select one answer

Answer choices

  1. a. CodePipeline CloudWatch events and notifications
  2. b. Deploy a Lambda function in each account that calls DescribeTrustedAdvisorCheckResult and opens support cases for WARN quota checks. Schedule it daily from the management account over EventBridge. (not recommended for production workloads)
  3. c. CloudWatch composite alarms
  4. d. Enable trusted access between Service Quotas and Organizations. Create a CloudWatch alarm per needed service at 80% of quota utilization. Send Amazon SNS notifications when the alarm enters ALARM.

Architectural breakdown & explanation

Service Quotas integrates with Organizations and exposes utilization metrics for CloudWatch alarms; SNS is the standard notification channel.

Correct answer(s): d. Enable trusted access between Service Quotas and Organizations. Create a CloudWatch alarm per needed service at 80% of quota utilization. Send Amazon SNS notifications when the alarm enters ALARM.

Exam domain: Domain 4: Monitoring, Logging, and Incident Response (18% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified DevOps Engineer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.