SOA-C02 Monitoring, Logging, and Remediation Practice Question
A SysOps administrator wants to be notified when an Auto Scaling group launches a new instance. Which AWS service can be used to capture the Auto Scaling lifecycle events and send a notification?
⚠ Common exam trap
Many candidates confuse AWS CloudTrail (which records API calls) with EventBridge (which captures service events), leading them to choose CloudTrail for event-driven notifications, but CloudTrail does not handle lifecycle events or push notifications directly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon Simple Notification Service (SNS)
Amazon SNS is the correct choice because it can receive lifecycle notifications from Auto Scaling groups via Amazon EventBridge (formerly CloudWatch Events) and then deliver those notifications to subscribers (e.g., email, SMS, HTTP endpoints). Auto Scaling groups emit lifecycle events (e.g., `EC2 Instance-launch Lifecycle Action`) that can be captured by EventBridge rules, which then invoke an SNS topic to send the notification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Config
Why it's wrong here
AWS Config records configuration item changes for your EC2 instances and Auto Scaling groups, delivering them to an S3 bucket or via configuration streams, but its primary purpose is compliance auditing and change management. While you can create a Config rule to react to a launched instance, Config does not natively emit a real-time 'scale-out' notification; it only records the resulting configuration state. Thus it lacks the direct, event-driven notification capability needed here.
- ✗
Amazon CloudWatch Logs
Why it's wrong here
CloudWatch Logs stores and retains log data from EC2 instances and Auto Scaling activity, but it is a passive log aggregation service. To be 'notified' of a scale-out event, you would need to create a metric filter on the log stream, set a CloudWatch alarm, and then route the alarm to SNS — CloudWatch Logs itself cannot push real-time alerts. Therefore it doesn't directly satisfy the requirement for a notification on an Auto Scaling event.
- ✓
Amazon Simple Notification Service (SNS)
Why this is correct
Amazon Simple Notification Service (SNS) is a fully managed pub/sub messaging service that Auto Scaling can directly integrate with for lifecycle events. You create an SNS topic, subscribe endpoints like email or Lambda, and then configure the Auto Scaling group to publish notifications such as 'autoscaling:EC2_INSTANCE_LAUNCH' and 'autoscaling:EC2_INSTANCE_TERMINATE'. This provides immediate, push-based alerts to administrators, making it the correct choice.
- ✗
AWS CloudTrail
Why it's wrong here
AWS CloudTrail captures and records every API call made to Auto Scaling and EC2, such as RunInstances, and stores these as audit events in S3 or CloudWatch Logs, but it does not offer a native real-time notification mechanism. To get alerted from CloudTrail, you'd have to set up an EventBridge rule on the API event and target an SNS topic, which is an additional construct. CloudTrail is for security investigation and operational forensics, not for directly notifying operators of Auto Scaling events.
Go deeper
Related to this question
About these practice questions
One of 1,169 original SOA-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.