Create a patched EC2 image monthly.
Automate the sequence and use the resulting AMI in Auto Scaling.
Which configuration is most appropriate?
Run a Systems Manager Automation runbook such as AWS-UpdateLinuxAmi to patch and create the AMI.
Detailed explanation
Manual work increases effort and procedural differences.
Manual work increases effort and procedural differences.
A predefined runbook automates patching and AMI creation as a repeatable procedure.
A predefined runbook automates patching and AMI creation as a repeatable procedure.
DNS does not create AMIs.
DNS does not create AMIs.
CloudFront does not create or distribute EC2 images as an AMI workflow.
CloudFront does not create or distribute EC2 images as an AMI workflow.
Check official documentation
Compare the following points with the official documentation.
Systems Manager Automation update Linux AMI runbookの公式説明を確認する。
What to confirm
AMI作成とRun Command単発実行を区別できる。
Key points
- SSM Automation
- AMI
- Patch installation
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Immutable baseline
A tested image gives newly launched instances a consistent starting state.
Automation chain
Patching and image creation should be logged as one repeatable process.