A company wants to implement new security compliance requirements for its development team to limit the use of approved Amazon Machine Images (AMIs). The company wants to provide access to only the ap

Question

Options

• ACreate a portfolio by using AWS Service Catalog that includes only EC2 instances launched with
• BCreate an AMI that contains the approved operating system and software by using EC2 Image
• CCreate an AMI that contains the approved operating system Tell the developers to use the
• DCreate an AWS Config rule to detect the launch of EC2 instances with an AMI that is not

• A
  84% (36)
• B
  9% (4)
• C
  5% (2)
• D
  2% (1)

Explanation

AWSService Catalogis designed to allow organizations to manage a catalog of approved products (including AMIs) that users can deploy. By creating a portfolio that contains only EC2 instances launched with preapproved AMIs, the company can enforce compliance with the approved operating system and software for all EC2 instances. Service Catalog also streamlines the process of launching EC2 instances, reducing the lead time while ensuring that developers use only the approved configurations. Option B (EC2 Image Builder): While EC2 Image Builder helps in creating and managing AMIs, it doesn't provide the enforcement mechanism that Service Catalog does. Option C (EventBridge rule and Systems Manager script): This solution is reactive and involves more operational complexity compared to Service Catalog. Option D (AWS Config rule): This option is reactive (it terminates non-compliant instances after launch) and introduces additional operational overhead.

No community discussion yet for this question.