SOA-C02 · Question #483
A company's security policy states that connecting to Amazon EC2 instances is not permitted through SSH and ROP. If access is required, authorized staff can connect to instances by using AWS Systems…
The correct answer is B. Assign the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile for. By assigning the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile associated with the Ubuntu instance, you grant the necessary permissions for the instance to communicate with AWS Systems Manager. This policy includes the required permissions for Session…
Question
A company's security policy states that connecting to Amazon EC2 instances is not permitted through SSH and ROP. If access is required, authorized staff can connect to instances by using AWS Systems Manager Session Manager. Users report that they are unable to connect to one specific Amazon EC2 instance that is running Ubuntu and has AWS Systems Manager Agent (SSM Agent) pre-installed. These users are able to use Session Manager to connect to other instances in the same subnet, and they are in an IAM group that has Session Manager permission for all instances. What should a SysOps administrator do to resolve this issue?
Options
- AAdd an inbound rule for port 22 in the security group associated with the Ubuntu instance.
- BAssign the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile for
- CConfigure the SSM Agent to log in with a user name of 搖buntu?
- DGenerate a new key pair, configure Session Manager to use this new key pair, and provide the
How the community answered
(36 responses)- A11% (4)
- B83% (30)
- C3% (1)
- D3% (1)
Explanation
By assigning the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile associated with the Ubuntu instance, you grant the necessary permissions for the instance to communicate with AWS Systems Manager. This policy includes the required permissions for Session Manager to establish connections to EC2 instances.
Topics
Community Discussion
No community discussion yet for this question.