SOA-C02 Question 130
Single answerYou are tasked with creating a custom Amazon Machine Image (AMI) for a web application that needs to be deployed across multiple regions. The AMI should be updated automatically with the latest security patches and application dependencies. Which approach should you take to meet this requirement?
- A
Use EC2 Image Builder to create a pipeline that automatically builds, tests, and distributes the AMI.
- B
Manually create an AMI from a running EC2 instance and copy it to other regions as needed.
- C
Use AWS Systems Manager Patch Manager to apply security patches to an existing AMI.
- D
Enable automatic updates for the AMI in the EC2 Management Console.
Show answer and explanation
Correct answer: A
Explanation
To meet the requirement of automatically updating and distributing AMIs, EC2 Image Builder should be used. It allows you to create pipelines that automate the AMI creation process, including applying patches, installing application dependencies, and distributing the AMI to multiple regions. This ensures consistent and up-to-date AMIs across your deployments.
- A. Correct.
This is the correct option. EC2 Image Builder automates the creation, testing, and distribution of AMIs, ensuring that they are consistently updated with the latest patches and dependencies.
- B. Incorrect.
This is incorrect. While manually creating an AMI and copying it to other regions works, it does not automate the update process or ensure consistency.
- C. Incorrect.
This is incorrect. AWS Systems Manager Patch Manager applies patches to running instances, not AMIs. It does not create or update AMIs for deployment.
- D. Incorrect.
This is incorrect. There is no option in the EC2 Management Console to enable automatic updates for AMIs. AMIs must be updated manually or through automation tools like EC2 Image Builder.