A standard EC2 image with monthly patches must be built, tested, and distributed to two Regions and several accounts.
Avoid manual copies and make build failures independently recoverable from distribution failures.
Which design best meets these requirements?
Use an EC2 Image Builder pipeline to build and test a golden AMI, then use distribution settings for target Regions and account launch permissions.
Detailed explanation
ECR replication is for container images and does not distribute EC2 AMIs or configure account launch permissions.
ECR replication is for container images and does not distribute EC2 AMIs or configure account launch permissions.
The pipeline automates the build and tests, while distribution settings define AMI delivery to multiple Regions and accounts. Distribution can be retried independently when appropriate.
The pipeline automates the build and tests, while distribution settings define AMI delivery to multiple Regions and accounts. Distribution can be retried independently when appropriate.
Manual steps make validation, scheduling, and destination consistency difficult, and do not provide a repeatable unit for retrying only a failed distribution.
Manual steps make validation, scheduling, and destination consistency difficult, and do not provide a repeatable unit for retrying only a failed distribution.
Creating images from running instances by hand does not provide a managed pipeline for standard image builds, tests, and distribution.
Creating images from running instances by hand does not provide a managed pipeline for standard image builds, tests, and distribution.
Check official documentation
Compare the following points with the official documentation.
EC2 Image Builder image pipeline、distribution configuration、AMI cross-account distributionの公式説明を確認する。
Official references
What to confirm
ビルド、テスト、配布、起動権限をImage Builderの各設定に分けて説明できる。
Key points
- EC2 Image Builder
- Golden AMI
- Image pipeline
- AMI sharing
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current behavior in the official SOA-C03 guide and AWS service documentation.
Foundation review
Workflow boundaries
Separating build and distribution makes failures easier to diagnose and retry.
Governance
A golden image provides a repeatable baseline instead of independent account changes.