Troubleshooting CloudWatch Synthetics Canary Timeout Errors
A company is using Amazon CloudWatch Synthetics canaries to monitor its web application endpoints. The canaries are failing intermittently with timeout errors. The DevOps team needs to troubleshoot the root cause. Which THREE actions should they take? (Select THREE.)
Quick Answer
The correct actions are to examine the canary logs in CloudWatch Logs, check VPC Flow Logs for network issues, and increase the canary timeout setting. These three steps directly address the root causes of timeout errors in CloudWatch Synthetics: application-level failures logged in the canary’s execution logs, network connectivity problems visible in VPC Flow Logs, and an insufficient timeout threshold that prematurely terminates the canary. On the AWS Certified DevOps Engineer Professional DOP-C02 exam, this question tests your understanding that Synthetics canaries run as AWS Lambda functions, not on EC2, so EC2-related troubleshooting is a common trap. CloudTrail is also a distractor because it records API calls, not canary execution details. A useful memory tip is “Logs, Flows, Timeout” — always check the canary’s own logs first, then network flow logs for connectivity, and finally adjust the timeout if the application response is legitimately slow.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Increase the canary timeout configuration to allow more time for the endpoint to respond.
Options B, D, and E are correct. B: Increasing the canary timeout configuration can resolve timeout errors if the endpoint is slow but still functional. D: Reviewing VPC Flow Logs helps identify network issues such as dropped or denied requests that could cause timeouts. E: Examining canary logs in CloudWatch Logs provides detailed error messages and execution traces to pinpoint the failure cause. Option A is incorrect because CloudTrail records API calls, not canary execution details; canary logs are in CloudWatch Logs. Option C is incorrect because canaries run in AWS Lambda, not on EC2 instances, so EC2 CPU utilization is irrelevant.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use AWS CloudTrail to review Canary API calls.
Why it's wrong here
CloudTrail logs API calls to create canaries, not execution details.
- ✓
Increase the canary timeout configuration to allow more time for the endpoint to respond.
Why this is correct
If the timeout is too low, increasing it may resolve false positives.
- ✗
Check the EC2 instance CPU utilization in the VPC where the canaries run.
Why it's wrong here
Canaries run as Lambda functions, not on EC2 instances.
- ✓
Review VPC Flow Logs to see if requests are being dropped or denied.
Why this is correct
Flow logs can reveal network issues causing timeouts.
- ✓
Examine the canary logs in CloudWatch Logs for error messages.
Why this is correct
Canary logs contain output from the script execution.
Visual reference
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
This DOP-C02 question is part of Courseiva's 1,339-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on DOP-C02
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company is using Amazon CloudWatch Synthetics to monitor the availability of a web application. The canary runs every 5 minutes from multiple locations. Recently, the canary has been failing intermittently with HTTP 503 errors, but the application team reports that the application is healthy. Which step should the DevOps engineer take to identify the cause of the false positives?
medium- A.Increase the canary timeout setting to allow more time for the application to respond.
- B.Add more canary locations to increase coverage.
- ✓ C.Review the canary's CloudWatch Logs to check for network errors or timeouts.
- D.Increase the canary run frequency to every 1 minute.
Why C: Checking the canary's CloudWatch Logs might reveal that the failure is due to a network timeout or other client-side issue, not the application. Option A is wrong because increasing canary frequency would generate more data but not identify the cause. Option B is wrong because increasing timeout might mask the issue. Option D is wrong because adding more locations would not pinpoint the cause if the issue is client-side.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.