Exam AWS Certified SysOps Administrator - Associate topic 1 question 365 discussion

option A using Systems Manager Run Command is the most efficient and effective way to implement the security code provided by the security team across all EC2 instances and to provide a report or evidence of successful execution to the security team

run command

A is for sure

Explanation: The AWS Systems Manager Run Command allows the SysOps administrator to execute commands on multiple EC2 instances simultaneously, which is crucial for managing a large fleet of instances efficiently. By using the AWS-RunShellScript or AWS-RunPowerShellScript documents, the SysOps administrator can run the code provided by the security team on both Windows-based and Linux-based instances, as required. The SysOps administrator can specify the operating system tag as a target parameter, ensuring that the code is only executed on the relevant instances, which saves time and prevents errors. AWS Systems Manager keeps a history of Run Command executions, providing an easy way to provide evidence to the security team that the code has successfully run on all instances.

A Option A is the most efficient and automated way to quickly implement the code on all EC2 instances and provide evidence to the security team. AWS Systems Manager Run Command allows you to run commands on multiple instances simultaneously, making it ideal for fleet management. By choosing the appropriate AWS-RunShellScript (for Linux) or AWS-RunPowerShellScript (for Windows) document, the SysOps administrator can execute the code provided by the security team on the instances based on their operating system tags. The command history provides a record of the execution, and this evidence can be shared with the security team to demonstrate that the code has successfully run on all instances.

You don´t need to re-image your instances, just apply the code with RunCommand.