A CloudFormation custom resource was used to provision AD Connector. The Lambda function executed and created the AD Connector, but CloudFormation remains in CREATE_IN_PROGRESS and does not finish. What should the engineer do to correct this?
Choose an answer
Tap an option to check your answer.
Correct answer: Ensure the Lambda function code sends a response to the pre-signed S3 URL that CloudFormation provides for custom resources..
Why this is the answer
CloudFormation custom resources require the backing Lambda function to send a response back to a pre-signed S3 URL provided by CloudFormation. This response signals to CloudFormation whether the resource creation was successful or failed, allowing the stack to proceed or roll back. If no response is sent, CloudFormation will indefinitely wait, keeping the stack in a CREATEINPROGRESS state. Exiting successfully is necessary but insufficient; the response to S3 is the critical step for CloudFormation. cloudformation:UpdateStack permissions are not required for a custom resource Lambda to signal completion. ds:ConnectDirectory permissions are needed for the Lambda to create the AD Connector, but their absence would cause the creation to fail, not hang in CREATEINPROGRESS.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed