SAP-C02 Question 174
Single answerAn organization wants to automate the patching of its Amazon EC2 instances in multiple regions while ensuring compliance with security policies. They want to apply patches based on a predefined schedule and require detailed reporting on patch compliance. Which AWS service or feature can best meet these requirements?
- A
AWS Systems Manager Patch Manager
- B
AWS CloudFormation
- C
AWS OpsWorks
- D
AWS Config
Show answer and explanation
Correct answer: A
Explanation
AWS Systems Manager Patch Manager is the best choice for automating patching of EC2 instances across multiple regions. It provides features such as predefined patch baselines, scheduling capabilities, and compliance reporting, making it a comprehensive solution for the organization's requirements.
- A. Correct.
AWS Systems Manager Patch Manager is specifically designed for automating patch management on EC2 instances and on-premises servers. It allows you to define patch baselines, apply patches on a schedule, and provides detailed compliance reporting.
- B. Incorrect.
AWS CloudFormation is a service for managing and deploying infrastructure-as-code templates. While it can deploy EC2 instances, it does not directly handle patch management or compliance reporting.
- C. Incorrect.
AWS OpsWorks is a configuration management service that supports Chef and Puppet. While it can automate software configurations, it is not specifically designed for patch management or compliance reporting.
- D. Incorrect.
AWS Config is a service for assessing, auditing, and evaluating the configurations of AWS resources. While it helps in compliance tracking, it does not handle automated patching or patch compliance reporting.