Review patch compliance across EC2 instances in an organization.
Identify noncompliant nodes and send them to remediation.
Which feature is most appropriate?
Use Systems Manager Patch Manager compliance information to list nodes that do not meet the baseline.
Detailed explanation
CDN performance does not indicate operating-system patch compliance.
CDN performance does not indicate operating-system patch compliance.
S3 storage size is unrelated to EC2 patch status.
S3 storage size is unrelated to EC2 patch status.
Patch Manager reports nodes as compliant or noncompliant against the selected patch baseline.
Patch Manager reports nodes as compliant or noncompliant against the selected patch baseline.
DNS query volume does not show patch compliance.
DNS query volume does not show patch compliance.
Check official documentation
Compare the following points with the official documentation.
Systems Manager Patch Manager complianceの公式説明を確認する。
What to confirm
パッチ実行と準拠レポートを区別できる。
Key points
- Patch Manager
- Compliance
- Patch baseline
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Execution versus report
Patch installation changes a node; compliance information shows whether it now meets the baseline.
Remediation queue
Noncompliant nodes can be prioritized for a later patch operation.