SAP-C02 Question 391
Select 2An organization is using AWS Systems Manager to manage a fleet of EC2 instances across multiple environments (development, staging, and production). They want to ensure consistent application configurations across all instances while minimizing manual effort. Additionally, they require the ability to audit changes to configurations and roll back to a previous state if necessary. Which combination of features in AWS Systems Manager should be used to meet these requirements?
- A
Systems Manager State Manager
- B
AWS Config
- C
Systems Manager Automation Documents (runbooks)
- D
Systems Manager Parameter Store
- E
Systems Manager Session Manager
Show answer and explanation
Correct answers: A, D
Explanation
To ensure consistent application configurations across instances with minimal manual effort, Systems Manager State Manager can be used to apply and enforce configuration policies, while Parameter Store serves as a secure and centralized storage for configuration data. Together, these features provide consistency, auditing, and rollback capabilities. Other options, such as AWS Config and Automation Documents, serve different use cases and do not directly address the requirements described.
- A. Correct.
Systems Manager State Manager is used to manage and enforce configuration policies for EC2 instances, ensuring consistent configurations across environments. It also provides auditing and automation capabilities.
- B. Incorrect.
AWS Config is a service for monitoring and recording AWS resource configurations but is not specific to managing application or instance configurations.
- C. Incorrect.
Systems Manager Automation Documents (runbooks) are used to automate complex operational tasks, but they are not focused on enforcing or maintaining consistent configurations.
- D. Correct.
Systems Manager Parameter Store is essential for storing and managing configuration data, such as secrets or configurations, which can then be referenced by State Manager to enforce consistency.
- E. Incorrect.
Systems Manager Session Manager is used for secure, auditable instance access without requiring SSH or RDP and does not address configuration enforcement.