SOA-C02 · Question #654
A company's AWS accounts are in an organization in AWS Organizations. The organization has all features enabled. The accounts use Amazon EC2 instances to host applications. The company manages the…
The correct answer is D. Create an AWS CloudFormation stack set that contains an EC2 instance profile with the. To manage all current and future EC2 instances with AWS Systems Manager, each instance must have the proper IAM permissions. The most efficient solution is to deploy an EC2 instance profile that includes the AmazonSSMManagedEC2InstanceDefaultPolicy (which grants the necessary…
Question
A company's AWS accounts are in an organization in AWS Organizations. The organization has all features enabled. The accounts use Amazon EC2 instances to host applications. The company manages the EC2 instances manually by using the AWS Management Console. The company applies updates to the EC2 instances by using an SSH connection to each EC2 instance. The company needs a solution that uses AWS Systems Manager to manage all the organization's current and future EC2 instances. The latest version of Systems Manager Agent (SSM Agent) is running on the EC2 instances. Which solution will meet these requirements?
Options
- AConfigure a home AWS Region in Systems Manager Quick Setup in the organization's
- BConfigure a home AWS Region in Systems Manager Quick Setup in the organization's
- CCreate an AWS CloudFormation stack set that contains a Systems Manager parameter to define
- DCreate an AWS CloudFormation stack set that contains an EC2 instance profile with the
How the community answered
(37 responses)- A5% (2)
- B3% (1)
- C8% (3)
- D84% (31)
Explanation
To manage all current and future EC2 instances with AWS Systems Manager, each instance must have the proper IAM permissions. The most efficient solution is to deploy an EC2 instance profile that includes the AmazonSSMManagedEC2InstanceDefaultPolicy (which grants the necessary permissions to Systems Manager) to all accounts in the organization. Using AWS CloudFormation StackSets from the management account allows you to centrally deploy this instance profile across every account, ensuring all EC2 instances have the appropriate configuration for Systems Manager. This solution minimizes operational overhead and leverages AWS Organizations to automatically apply the configuration to both existing and future instances.
Topics
Community Discussion
No community discussion yet for this question.