Examkin

Question

Difficulty: MediumAWS Management, Governance, and Developer Tools

A cloud operations team wants to optimize the management of their AWS environment. They need to select AWS services that will allow them to meet the following two requirements:

1. Run shell scripts and install software patches across a fleet of Amazon EC2 instances without needing to manage SSH keys or bastion hosts.
2. Track and evaluate the configuration history of their AWS resources against predefined compliance rules.

Which of the following AWS services should the team select? (Select TWO.)

  1. AWS Systems ManagerAnswer
  2. AWS ConfigAnswer
  3. C
    AWS CloudTrail
  4. D
    AWS CloudFormation
  5. E
    AWS Elastic Beanstalk

Answer

The correct answers are AWS Systems Manager and AWS Config.
AWS Systems Manager enables secure remote management of EC2 instances (such as running shell scripts or applying patches) without managing SSH keys. AWS Config records configuration histories and evaluates resource compliance against specified guidelines.

Step-by-Step Solution

1
Identify the AWS service designed for automated fleet management, scripting, and patching without SSH keys.
AWS Systems Manager (specifically Run Command) meets this requirement.
It allows secure command execution across instance fleets.
2
Identify the AWS service designed to record configuration history and evaluate resources against compliance rules.
AWS Config meets this requirement.
It acts as a configuration auditor and compliance evaluator.
3
Select both AWS Systems Manager and AWS Config as the required services.
The final choices are AWS Systems Manager and AWS Config.
Together they satisfy both operational objectives.

Key Concept

AWS Management and Governance Tools
Estimated Time:1m 30s
Rate this question

Topics

AWS Management, Governance, and Developer Tools

More questions from this topic