SAP-C02 Question 176
Single answerAn organization manages hundreds of EC2 instances across multiple environments, such as development, staging, and production. They need to automate patch management for operating systems while ensuring that critical updates are applied immediately in production but delayed in other environments for testing purposes. Which solution using AWS Systems Manager is the most appropriate?
- A
Use AWS Systems Manager Patch Manager to define patch baselines for each environment and configure different patch approval rules for production and non-production environments.
- B
Use AWS Systems Manager Automation to create a custom script that applies patches to production instances immediately and non-production instances after testing.
- C
Use AWS Systems Manager Maintenance Windows to schedule patching tasks separately for production and non-production environments.
- D
Manually apply patches to EC2 instances in production using AWS Systems Manager Run Command and schedule patching for non-production environments.
Show answer and explanation
Correct answer: A
Explanation
AWS Systems Manager Patch Manager is specifically designed for managing patch compliance across different environments. By defining patch baselines with separate approval rules, you can ensure production receives critical updates immediately while delaying updates for testing in other environments. This approach aligns with the organization's need for automation and environment-specific configurations.
- A. Correct.
Correct. AWS Systems Manager Patch Manager allows you to create patch baselines with customized approval rules for different environments. This approach ensures that critical updates can be applied immediately to production while non-production environments can have delayed updates for testing.
- B. Incorrect.
Incorrect. While Automation can be used for custom workflows, Patch Manager is specifically designed for managing patches and is more appropriate for this scenario. Using Automation adds unnecessary complexity.
- C. Incorrect.
Incorrect. Maintenance Windows can assist in scheduling when patches are applied, but it does not inherently provide the ability to define different patch approval rules for environments. Patch Manager is more suitable for this requirement.
- D. Incorrect.
Incorrect. Manually applying patches is not scalable and does not align with the requirement to automate patch management. This approach introduces operational overhead and increases the risk of errors.