QuestionQ10

Deployment, Provisioning, and Automation

A company operates multiple Amazon EC2 instances that use the Ubuntu operating system (OS). The company must patch the OS on a regular basis. A CloudOps engineer manually installs patches each week. The company continually adds new EC2 instances running Ubuntu. The CloudOps engineer must automate the patching process.

Which solution meets this requirement in the MOST operationally efficient manner?

Explanation

AWS Systems Manager Patch Manager automates patch scanning and installation for managed EC2 instances, including Ubuntu Server nodes, and can run patch installation on a defined schedule. Installing the SSM Agent enables the instances to be managed without maintaining SSH-based custom automation. Patch Manager uses Ubuntu’s package-management workflow to apply approved patches, while Systems Manager Inventory is for collecting inventory and compliance information rather than installing patches.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!