Explanation:
AWS Systems Manager State Manager can be used to automate the process of keeping managed instances in a defined state. You can create an association that runs a specific script or document (like installing software) whenever an instance is launched or on a schedule. This is a robust way to bootstrap instances. CloudWatch agents, Amazon Inspector, and Security Hub are not designed for software installation/provisioning during launch.
Ultimate access to all questions.
Question 13 A company needs to implement a solution to install specific software on Amazon EC2 instances when the instances launch.
Which solution will meet this requirement?
A
Configure AWS Systems Manager State Manager associations to bootstrap the EC2 instances with the required software at launch.
B
Use the Amazon CloudWatch agent to detect EC2 InstanceStart events and to inject the required software. Modify the InstanceRole IAM role to add permissions for the StartTask API operation.
C
Use Amazon Inspector to detect EC2 launch events. Configure Amazon Inspector to install the required software as part of lifecycle hooks for the EC2 launch events.
D
Use AWS Security Hub remediation actions to install the required software at launch.
E
None
F
None
No comments yet.