SAP-C02 Question 175
Single answerA company uses an Auto Scaling group to manage its fleet of EC2 instances across multiple Availability Zones. The company wants to ensure that specific software packages and configurations are automatically applied when new instances are launched. Additionally, they want to audit and manage the configuration of these instances over time without requiring manual intervention. Which solution should the company implement to meet these requirements?
- A
Use AWS Systems Manager to create an Automation document (runbook) that installs the software and applies configurations when instances are launched.
- B
Use EC2 instance user data scripts to install the software and apply configurations during instance initialization.
- C
Create an Auto Scaling lifecycle hook to trigger a Lambda function that installs the software and applies configurations.
- D
Attach an AWS Systems Manager Agent (SSM Agent) to the instances and use Systems Manager State Manager to enforce desired configurations on an ongoing basis.
Show answer and explanation
Correct answer: D
Explanation
AWS Systems Manager State Manager is the ideal solution for this scenario. It allows the company to define and enforce configurations on EC2 instances consistently over time. By leveraging the SSM Agent, they can ensure that software and configurations are applied during initialization and continuously managed. Alternatives like user data scripts or lifecycle hooks may help with initial setup but lack the ongoing management capabilities required by the company.
- A. Incorrect.
AWS Systems Manager Automation documents (runbooks) are designed for automating operational tasks, but they are not the best fit for ongoing configuration management or enforcing desired state over time.
- B. Incorrect.
User data scripts are executed only once when an EC2 instance is launched. They do not provide ongoing configuration management or auditing capabilities.
- C. Incorrect.
Auto Scaling lifecycle hooks with Lambda can be used for custom initialization tasks, but this approach does not provide a mechanism for ongoing configuration management or auditing.
- D. Correct.
AWS Systems Manager State Manager is specifically designed to ensure that instances maintain a desired configuration over time. By attaching the SSM Agent to the instances, the company can enforce software installations and configurations continuously, meeting all the requirements.