SAP-C02 Question 395
Single answerA company wants to automate the configuration management of its fleet of Amazon EC2 instances to ensure consistent application deployment and avoid configuration drift. The solution must allow for automatic patching, inventory collection, and execution of custom scripts across multiple regions without requiring SSH access to the instances. Which AWS service and feature combination is the MOST appropriate to achieve this?
- A
AWS Systems Manager with State Manager and Run Command
- B
AWS OpsWorks with Chef Automate
- C
AWS Elastic Beanstalk with custom platform configurations
- D
AWS CloudFormation with nested stacks
Show answer and explanation
Correct answer: A
Explanation
AWS Systems Manager with State Manager and Run Command is specifically designed for managing configuration and maintaining the desired state of EC2 instances. It also enables features like patch management, inventory collection, and script execution without requiring SSH access, making it the most appropriate choice for this scenario. Other options either lack the required features or are not optimized for managing configuration drift and automation across regions.
- A. Correct.
AWS Systems Manager with State Manager and Run Command is the most suitable option for managing EC2 instances. State Manager ensures the desired state of the instances is maintained, and Run Command allows for executing custom scripts without SSH access. It also supports patching and inventory collection across regions.
- B. Incorrect.
AWS OpsWorks with Chef Automate is a configuration management solution but is less suitable in this scenario as it primarily focuses on Chef recipes and requires additional setup. It is also region-specific and doesn't natively handle inventory collection or avoid SSH requirements.
- C. Incorrect.
AWS Elastic Beanstalk with custom platform configurations is a managed service for deploying and scaling web applications. While it can manage application deployment, it does not address configuration drift, inventory collection, or patching for existing EC2 instances.
- D. Incorrect.
AWS CloudFormation with nested stacks is useful for infrastructure-as-code deployments but does not provide ongoing configuration management, patching, or inventory collection. It is focused on provisioning infrastructure rather than managing its state over time.