MLS-C01 Question 270
Select 3You are a machine learning engineer tasked with setting up a secure and scalable environment for training models on Amazon EC2 instances. You want to create a consistent environment across multiple instances by using a custom Amazon Machine Image (AMI). After setting up one EC2 instance with all required software, dependencies, and configurations, what steps should you take to create and use a custom AMI for your environment?
- A
Use the EC2 instance to create an AMI by selecting 'Create Image' from the instance actions menu in the AWS Management Console.
- B
After creating the AMI, launch new EC2 instances by selecting the custom AMI as the source.
- C
Manually copy the EC2 instance's data and configuration files to each new instance using SSH.
- D
Include sensitive credentials, such as API keys, directly in the AMI to ensure ease of use across instances.
- E
Test the AMI by launching a new EC2 instance from it to verify that all configurations and dependencies are working as expected.
Show answer and explanation
Correct answers: A, B, E
Explanation
To create and use a custom AMI, you first create an image from a configured EC2 instance. This image can then be used to launch other instances with the same setup, ensuring consistency and scalability. However, security best practices dictate that sensitive information should not be embedded directly in the AMI. Testing the AMI by launching a new instance ensures that the image is correctly configured and ready for production or development use.
- A. Correct.
Correct. Creating an AMI from the EC2 instance is the first step to building a reusable image for consistent environments.
- B. Correct.
Correct. After creating the custom AMI, you can use it to launch new EC2 instances with the same configuration.
- C. Incorrect.
Incorrect. Manually copying files and configurations is error-prone and defeats the purpose of using AMIs to ensure consistency.
- D. Incorrect.
Incorrect. Including sensitive credentials in an AMI is a security risk. Use AWS Secrets Manager or other secure methods to manage credentials.
- E. Correct.
Correct. Testing the AMI ensures that it works as expected and includes all necessary configurations and dependencies.