Operational Excellence — AWS SysOps Administrator (SOA-C03)
Four Tools, Four Different Operational Questions Answered
Requirement: full operational visibility across a production workload — infrastructure behavior, API activity, service traces, and configuration drift. Competing tools: CloudWatch, CloudTrail, X-Ray, Config. Each answers a different question. CloudWatch answers what is happening now. CloudTrail answers who did what and when. X-Ray answers where in the request path did this fail. Config answers whether this resource has drifted from its desired state. Misassigning a tool means misreading the scenario's actual observability gap.
What This Pattern Tests
The exam describes an operational challenge and tests whether you apply automation over manual intervention. CloudFormation and CDK make deployments repeatable and auditable. Systems Manager provides patch management via Patch Manager, parameter store for configuration, and runbook automation via SSM Automation documents across EC2 fleets. For DevOps-focused exams like DOP-C02, CodePipeline orchestrates CI/CD with approval gates, while Config rules detect drift and trigger SSM remediation. For data engineering exams like DEA-C01, Glue workflows and Step Functions orchestrate ETL pipelines with error handling and retry logic. CloudWatch composite alarms combine multiple metrics into single operational alerts. The trap is recommending manual processes — SSH into servers, manually apply patches, or hand-edit Glue job configurations.
Decision Axis
Reactive manual intervention vs. proactive automation. The exam always prefers automation that is auditable and repeatable.
Associated Traps
More Top Traps on This Exam
Decision Rules
Whether to create a CloudWatch Logs metric filter with pattern matching on userIdentity.type = Root against the existing log group — emitting a custom metric consumed by a CloudWatch alarm — or enable a separate detection service such as GuardDuty or AWS Config that introduces additional latency and cost beyond what the already-delivered log stream requires.
Domain Coverage
Difficulty Breakdown