Question

Difficulty: HardAWS Compute Services

A financial institution is planning to migrate a legacy data processing application to AWS. The company's compliance policy mandates that the internal operations team must maintain complete administrative control over the guest operating system, including the ability to install custom kernel modules and manage OS-level patches. Which AWS compute service should the company select to meet these requirements?

  1. Amazon Elastic Compute Cloud (Amazon EC2)Answer
  2. B
    AWS Fargate
  3. C
    AWS Lambda
  4. D
    AWS Elastic Beanstalk

Answer

Amazon Elastic Compute Cloud (Amazon EC2)
Amazon Elastic Compute Cloud (Amazon EC2) operates as an Infrastructure as a Service (IaaS) model. This design grants the customer full root-level administrative access to the guest operating system. Consequently, the operations team has the necessary permissions to configure the OS, install proprietary kernel-level drivers, and manage updates, fulfilling the compliance requirements.

Step-by-Step Solution

1
Analyze the organization's requirement for administrative control.
The legacy application requires direct access to the guest operating system to install custom kernel modules and perform OS-level patching.
This requirement determines the level of shared responsibility and administrative access needed from the AWS compute service.
2
Evaluate the management boundaries of the available AWS compute options.
Serverless options (AWS Lambda and AWS Fargate) manage the operating system layer automatically, denying direct OS access to the customer. Platform as a Service (AWS Elastic Beanstalk) abstracts infrastructure management to simplify deployments, whereas Amazon EC2 provides full root-level control over the virtual machine's operating system.
To identify which service permits the specific configuration of custom kernel modules at the operating system level.

Key Concept

The customer's administrative control and patching responsibilities under the AWS Shared Responsibility Model vary across IaaS, PaaS, and serverless compute offerings.
Estimated Time:1m 30s
Rate this question