A SysOps Administrator is configuring AWS Systems Manager Patch Manager to apply a custom patch baseline to a fleet of Amazon EC2 instances. The Administrator wants to organize these instances into a patch group named 'HR-Servers' to ensure they are patched together. Which of the following actions are required to successfully associate the EC2 instances with the custom patch baseline? (Select TWO.)
- Tag the EC2 instances with a tag key of 'Patch Group' and a tag value of 'HR-Servers'.Cevap
- Register the 'HR-Servers' patch group with the custom patch baseline in the AWS Systems Manager console.Cevap
- CTag the EC2 instances with a tag key of 'patch_group' and a tag value of 'HR-Servers'.
- DAdd the 'iam:AssumeRole' permission to the EC2 instances' IAM role policy to authorize Systems Manager patching operations.
Cevap
To associate the instances with the custom baseline, the Administrator must tag the EC2 instances using the case-sensitive key 'Patch Group' with the value 'HR-Servers', and register the patch group name with the custom patch baseline in AWS Systems Manager Patch Manager.
To map instances to a specific patch baseline, you must use the exact, case-sensitive tag key 'Patch Group' on the instances. You must then register that patch group name with the desired custom patch baseline in AWS Systems Manager. This two-part mapping ensures the correct instances are targeted and patched with the correct rules.
Adım Adım Çözüm
Anahtar Kavram
SSM Patch Manager Patch Group and Baseline Association