AWS Certified SysOps Administrator – AssociateDeployment, Provisioning, and AutomationHard
A SysOps team manages hundreds of Amazon EC2 instances across multiple AWS accounts and regions. They need to ensure that a specific set of security agents and monitoring tools are installed and configured consistently on all new and existing Linux EC2 instances. The solution should be automated, idempotent, and report compliance status. Which AWS service is best suited for this task?
- AAWS Elastic Beanstalk
- BAWS CloudFormation with User Data
- CAWS OpsWorks Stacks
- DAWS Systems Manager State Manager
Show answer & explanationAnswer & explanation
Correct answer: D. AWS Systems Manager State Manager
AWS Systems Manager State Manager allows you to define and maintain a desired state for your instances. It can automatically apply configurations, install software, and run scripts across a large fleet of instances, ensuring idempotency and providing compliance reporting.
Why the other options are wrong
- A. AWS Elastic Beanstalk is an orchestration service for deploying and scaling web applications and services, not for general-purpose instance configuration management across an entire fleet.
- B. While User Data can configure instances on launch, it's not idempotent by default, doesn't handle existing instances, and lacks built-in compliance reporting for continuous state management.
- C. AWS OpsWorks Stacks is primarily for application deployment and configuration management using Chef or Puppet, which might be overkill and less flexible for just agent installation across a diverse fleet.
Systems Manager State Manager
AWS Systems Manager State Manager is a secure and scalable configuration management service that automates the process of defining and maintaining a consistent desired state for your EC2 instances and on-premises servers.
- Uses Associations to apply configurations.
- Supports various document types (e.g., `AWS-RunShellScript`, `AWS-ApplyAnsiblePlaybooks`).
- Provides compliance reporting for configuration drift.
Memory trick: State Manager keeps your fleet in the *state* you desire, like a helpful robot.