Skip to content
Job preparation

AWS Cloud Engineer · 10+ Years

Platform standards, governance, operating model, metrics, mentoring, and decision frameworks.

Try each answer before revealing the suggested coaching answer.

← All AWS Cloud Engineer levels

25 questions

01How would you standardize EC2 lifecycle across multiple teams as a technical lead or architect?

A technical-leadership answer

Say this first: EC2 lifecycle should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply EC2 lifecycle, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → EC2 lifecycle → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 1
02How would you define governance, ownership, and success metrics for AMI and launch templates?

A technical-leadership answer

Say this first: AMI and launch templates should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply AMI and launch templates, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → AMI and launch templates → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 2
03A leadership team asks you to improve maturity around VPC design. What roadmap would you propose?

A technical-leadership answer

Say this first: VPC design should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply VPC design, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → VPC design → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 3
04How would you balance delivery speed, risk, cost, and maintainability for subnets and route tables?

A technical-leadership answer

Say this first: subnets and route tables should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply subnets and route tables, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → subnets and route tables → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 4
05How would you mentor teams that use security groups vs NACLs inconsistently across projects?

A technical-leadership answer

Say this first: security groups vs NACLs is a choice between approaches with different strengths. The useful answer is the decision rule, not a dictionary definition.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply security groups vs NACLs, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • Choose the option that fits the workload and constraints; do not present one option as universally superior.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Concrete check

Review the least-privilege policy, then test the denied path as well as the allowed path.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → security groups vs NACLs → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 5
06How would you standardize IAM users roles and policies across multiple teams as a technical lead or architect?

A technical-leadership answer

Say this first: IAM users roles and policies should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply IAM users roles and policies, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → IAM users roles and policies → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 6
07How would you define governance, ownership, and success metrics for S3 storage classes?

A technical-leadership answer

Say this first: Retrieval-augmented generation fetches relevant, approved context at answer time so a model can ground its response in current source material.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply S3 storage classes, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → S3 storage classes → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 7
08A leadership team asks you to improve maturity around S3 security. What roadmap would you propose?

A technical-leadership answer

Say this first: S3 security should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply S3 security, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Concrete check

Review the least-privilege policy, then test the denied path as well as the allowed path.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → S3 security → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 8
09How would you balance delivery speed, risk, cost, and maintainability for RDS backup and scaling?

A technical-leadership answer

Say this first: RDS backup and scaling should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply RDS backup and scaling, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → RDS backup and scaling → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 9
10How would you mentor teams that use load balancers inconsistently across projects?

A technical-leadership answer

Say this first: load balancers should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply load balancers, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → load balancers → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 10
11How would you standardize Auto Scaling Groups across multiple teams as a technical lead or architect?

A technical-leadership answer

Say this first: Auto Scaling Groups should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply Auto Scaling Groups, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → Auto Scaling Groups → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 11
12How would you define governance, ownership, and success metrics for CloudWatch logs and alarms?

A technical-leadership answer

Say this first: CloudWatch logs and alarms should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply CloudWatch logs and alarms, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → CloudWatch logs and alarms → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 12
13A leadership team asks you to improve maturity around Route 53 routing. What roadmap would you propose?

A technical-leadership answer

Say this first: Route 53 routing should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply Route 53 routing, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → Route 53 routing → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 13
14How would you balance delivery speed, risk, cost, and maintainability for Lambda basics?

A technical-leadership answer

Say this first: Lambda basics should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply Lambda basics, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → Lambda basics → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 14
15How would you mentor teams that use API Gateway inconsistently across projects?

A technical-leadership answer

Say this first: API Gateway should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply API Gateway, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → API Gateway → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 15
16How would you standardize EKS basics across multiple teams as a technical lead or architect?

A technical-leadership answer

Say this first: EKS basics should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply EKS basics, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → EKS basics → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 16
17How would you define governance, ownership, and success metrics for ECS vs EKS?

A technical-leadership answer

Say this first: ECS vs EKS is a choice between approaches with different strengths. The useful answer is the decision rule, not a dictionary definition.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply ECS vs EKS, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • Choose the option that fits the workload and constraints; do not present one option as universally superior.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → ECS vs EKS → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 17
18A leadership team asks you to improve maturity around Secrets Manager and KMS. What roadmap would you propose?

A technical-leadership answer

Say this first: Secrets Manager and KMS should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply Secrets Manager and KMS, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → Secrets Manager and KMS → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 18
19How would you balance delivery speed, risk, cost, and maintainability for CloudFormation vs Terraform?

A technical-leadership answer

Say this first: CloudFormation vs Terraform is a choice between approaches with different strengths. The useful answer is the decision rule, not a dictionary definition.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply CloudFormation vs Terraform, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • Choose the option that fits the workload and constraints; do not present one option as universally superior.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → CloudFormation vs Terraform → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 19
20How would you mentor teams that use AWS cost optimization inconsistently across projects?

A technical-leadership answer

Say this first: AWS cost optimization should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply AWS cost optimization, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → AWS cost optimization → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 20
21How would you standardize Well-Architected Framework across multiple teams as a technical lead or architect?

A technical-leadership answer

Say this first: Well-Architected Framework should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply Well-Architected Framework, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → Well-Architected Framework → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 21
22How would you define governance, ownership, and success metrics for high availability design?

A technical-leadership answer

Say this first: high availability design should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply high availability design, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → high availability design → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 22
23A leadership team asks you to improve maturity around disaster recovery patterns. What roadmap would you propose?

A technical-leadership answer

Say this first: disaster recovery patterns should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply disaster recovery patterns, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → disaster recovery patterns → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 23
24How would you balance delivery speed, risk, cost, and maintainability for private connectivity?

A technical-leadership answer

Say this first: private connectivity should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply private connectivity, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → private connectivity → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 24
25How would you mentor teams that use AWS security best practices inconsistently across projects?

A technical-leadership answer

Say this first: AWS security best practices should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a customer-facing API that must survive a regional dependency failure. The team must decide how to apply AWS security best practices, verify the result, and explain the user impact. For an AWS Cloud Engineer, attach the explanation to a runbook and recovery test result.

Show judgment

  • make the decision criteria visible across teams and create a safe default path.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out a broad outage or an untested recovery path and the control that reduces it.

Concrete check

Review the least-privilege policy, then test the denied path as well as the allowed path.

Evidence to mention

Track availability, recovery time, and cost per request. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → AWS security best practices → observable result → owner review

Practice prompt: Explain the escalation route when a broad outage or an untested recovery path conflicts with delivery pressure.

Link to question 25

Further reading

These are original practice questions and suggested answers. Adapt them to your own work and explain evidence, trade-offs, and limitations.