Deploy EC2 Instances with Latest Security Patches | Answer for Exam 'DVA-C01' | AWS Certified Developer - Associate

Deploy EC2 Instances with Latest Security Patches

Prev Question Next Question

Question

The Development Team has successfully deployed a new application on the Amazon EC2 instance in the us-west-2 region.

The same application needs to be deployed on Amazon EC2 instances in other regions.

For this deployment, they are looking for your support to deploy EC2 instances with images built from instances in the us-west-2 region along with the latest security patches.

Which action will be best suited for this requirement?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer - D.

EC2 Image Builder can help provide images with the latest security patches & also automates testing these images to validate deployment.

Option A is incorrect as multiple snapshots will be required which will be time-consuming.

Option B is incorrect as creating automated scripts will incur additional admin work.

Option C is incorrect as manually creating EC2 image with the latest patches will be time-consuming & error-prone.

For more information on Amazon EC2 Image Builder, refer to the following URL-

https://aws.amazon.com/blogs/aws/automate-os-image-build-pipelines-with-ec2-image-builder/

The best-suited action for this requirement would be to use EC2 Image Builder to create images with the latest patches (Option D).

EC2 Image Builder is a fully managed service that makes it easier to automate the creation, management, and deployment of customized, secure, and up-to-date images of your EC2 instances or on-premises servers. EC2 Image Builder automates the process of patching and updating the operating system and software packages of an instance, ensuring that the latest security patches are applied. Using EC2 Image Builder ensures consistency across the images built across different regions.

Option A, creating a snapshot of an image, is a possibility but not the best-suited option because the created image will not contain the latest security patches. It also requires manual work to update and patch the image.

Option B, building automated scripts to create updated images with the latest patches, is a possible option, but it requires significant effort and may not be as effective as using a managed service like EC2 Image Builder.

Option C, manually creating EC2 images with the latest patches, is time-consuming and can be prone to errors. It also requires expertise in managing and patching the operating system and software packages.

Therefore, the best option for the development team to deploy EC2 instances with images built from instances in the us-west-2 region along with the latest security patches is to use EC2 Image Builder.