SAP-C02 Continuous Improvement for Existing Solutions Practice Question
A company is using AWS CloudFormation to manage infrastructure. The operations team wants to be notified when a stack operation fails. Which approach is the MOST efficient?
⚠ Common exam trap
The trap here is that candidates over-engineer the solution by reaching for EventBridge or Lambda, when the exam expects recognition that CloudFormation has a built-in SNS notification feature that is the most efficient answer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure an SNS topic as a notification option in the CloudFormation stack
CloudFormation natively supports SNS notifications via the NotificationARNs property on a stack, which emits events for stack operations such as CREATE_FAILED, UPDATE_FAILED, ROLLBACK_IN_PROGRESS, and DELETE_FAILED. Configuring an SNS topic directly on the stack is the least-effort, lowest-latency, and most operationally simple way to be alerted on failures because it requires no polling, no Lambda, and no custom code.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a scheduled CloudWatch Events rule that calls the DescribeStacks API and sends an alert if status is FAILED
Why it's wrong here
Polling DescribeStacks on a schedule introduces detection latency and repeated API calls, and it cannot observe transient failures that resolve between polls. Event-driven notification suits near-real-time reaction to state changes; scheduled polling fits periodic compliance reporting rather than immediate failure alerting.
- ✓
Configure an SNS topic as a notification option in the CloudFormation stack
Why this is correct
CloudFormation natively publishes stack event notifications to an SNS topic specified in the stack's notification configuration, covering failure events without custom polling or Lambda. This satisfies the requirement for efficient, event-driven alerting on stack operation failure.
- ✗
Use a Lambda function that is invoked by CloudFormation via custom resource
Why it's wrong here
A custom resource runs only during stack create, update or delete operations, so it cannot observe a stack operation that itself fails — the Lambda is invoked as part of that operation. Custom resources suit provisioning external dependencies or fetching values during deployment, not monitoring stack events.
- ✗
Use Amazon EventBridge to monitor CloudFormation API calls and trigger a Lambda function
Why it's wrong here
Monitoring CloudFormation API calls via EventBridge (often sourced from CloudTrail) is a valid mechanism for auditing specific API actions or reacting to security-related events, such as unauthorised resource changes. However, for detecting a stack operation failure, it is not the most efficient. CloudFormation directly publishes detailed stack status events, including failures, to Amazon SNS or EventBridge itself. Reacting to these specific, high-level stack status events provides a more direct and precise notification mechanism than parsing lower-level API call logs to infer a failure.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.