A company needs to implement a solution to install specific software on Amazon EC2 instances when the instances launch. Which solution will meet this requirement?

Question

Options

• AConfigure AWS Systems Manager State Manager associations to bootstrap the EC2 instances
• BUse the Amazon CloudWatch agent to detect EC2 InstanceStart events and to inject the required
• CUse Amazon Inspector to detect EC2 launch events. Configure Amazon Inspector to install the
• DUse AWS Security Hub remediation actions to install the required software at launch.

• A
  74% (39)
• B
  4% (2)
• C
  15% (8)
• D
  8% (4)

Explanation

AWS Systems Manager State Manager is purpose-built for maintaining desired configuration state on EC2 instances, including bootstrapping them with specific software at launch - making option A the correct choice. State Manager associations define what software or configurations should be applied and automatically enforce them when instances start.

Option B is wrong because CloudWatch agent is a monitoring and metrics tool, not a configuration management tool; it cannot inject software onto instances.

Option C is wrong because Amazon Inspector is a vulnerability assessment service that scans for security findings - it does not install software or respond to launch events in that way.

Option D is wrong because AWS Security Hub aggregates security findings and provides compliance dashboards; its remediation actions are not designed for bootstrapping software at instance launch.

Memory tip: Think of State Manager as a "state enforcer" - it continuously ensures your instances stay in the configuration you define, starting from the moment they launch. If the question involves automating software installation or configuration at EC2 launch, State Manager (or EC2 user data scripts, also under SSM) is almost always the answer.

No community discussion yet for this question.