A SysOps administrator is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The SysOps administrator has configured a patch baseline and a maintenance window. The…

Question

Options

• AAdd an inbound rule to the instances' security group.
• BAttach an IAM instance profile with access to Systems Manager to the instances.
• CCreate a Systems Manager activation Then activate the fleet of instances.
• DManually specify the instances to patch Instead of using tag-based selection.

• A
  9% (3)
• B
  74% (25)
• C
  15% (5)
• D
  3% (1)

Explanation

By default, AWS Systems Manager doesn't have permission to perform actions on your instances. Grant access by using an AWS Identity and Access Management (IAM) instance profile. An instance profile is a container that passes IAM role information to an Amazon Elastic Compute Cloud (Amazon EC2) instance at launch. You can create an instance profile for Systems Manager by attaching one or more IAM policies that define the necessary permissions to a new role or to a role you already created. https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-instance-profile.html

No community discussion yet for this question.