SOA-C02 Question 157
Single answerYour organization requires all EC2 instances to be patched automatically for critical and security updates. As a SysOps Administrator, you need to implement an automated patch management solution that ensures compliance without manual intervention. Which approach should you take?
- A
Use AWS Systems Manager Patch Manager to define patch baselines and apply them using an automated maintenance window.
- B
Manually connect to each EC2 instance via SSH and run OS-specific update commands on a scheduled basis.
- C
Create a Lambda function to periodically check for OS updates and apply them to all EC2 instances.
- D
Enable automatic updates directly in the operating system of your EC2 instances without using AWS services.
Show answer and explanation
Correct answer: A
Explanation
AWS Systems Manager Patch Manager is the recommended solution for automating patch management in AWS. It allows you to define patch baselines, schedule maintenance windows, and centrally manage updates across multiple EC2 instances. This approach ensures compliance, reduces manual effort, and provides detailed reporting capabilities.
- A. Correct.
Correct. AWS Systems Manager Patch Manager is specifically designed to automate patch management for EC2 instances. You can define patch baselines and use maintenance windows to schedule automatic patching.
- B. Incorrect.
Incorrect. Manually connecting to each EC2 instance is not scalable or automated, and it does not align with best practices for patch management.
- C. Incorrect.
Incorrect. While a Lambda function could be used to script updates, it is not a recommended or native method for automating patch management in AWS. AWS Systems Manager offers a more robust and purpose-built solution.
- D. Incorrect.
Incorrect. While enabling automatic updates in the OS might work for some cases, it does not provide centralized control, reporting, or the ability to enforce patch baselines, which are critical for compliance.