Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 196 discussion

B and E are the most effective in ensuring that updates to the application are installed on the running EC2 instances by leveraging CloudFormation's and AWS Systems Manager's capabilities for managing and applying updates.

The best combination of steps to ensure the application is updated on the running EC2 instances during a CloudFormation stack update is: B. Refactor the user data commands to use the cfn-init helper script. Update the user data to install and configure the cfn-hup and cfn-init helper scripts to monitor and apply the metadata changes. D. Refactor the user data commands to use an AWS Systems Manager document (SSM document). Add an AWS CLI command in the user data to use Systems Manager Run Command to apply the SSM document to the EC2 instances.

B&E D. Systems Manager Run Command (with user data): Using Run Command within user data to apply an SSM document introduces an unnecessary step. Option E with State Manager automates the process.

B, E. "Association" is the key. Details are everything during an Investigation...

User data is executed when the system starts, not executed in runing EC2.

EC2 instance profile with AmazonSSMManagedinstanceCore policy doesn't have permissions to SSM Run Command, so D is incorrect. So for me it's BE.

"Add an AWS CLI command in the user data to use Systems Manager Run Command to apply the SSM document to the EC2 instances." **Add an AWS CLI command in the ****user data***** it will not help to update running instances, tricky question. Only Systems Manager State Manager will update the running instances in this question

B and D A. This option is not applicable for updating applications on EC2 instances. B. Refactoring the user data commands to use the cfn-init helper script helps in handling metadata changes and applying them to the EC2 instances. This is especially useful in CloudFormation stack updates. C. Creating a new EC2 Auto Scaling group with an update policy doesn't necessarily address the application update requirement in this scenario. D. Refactoring the user data commands to use an AWS Systems Manager document and using Run Command to apply the SSM document is a valid approach for updating applications on EC2 instances. E. While using Systems Manager documents and State Manager is a valid approach, it might be more complex than needed for a straightforward update of an application on EC2 instances. Therefore, options B and D together provide a good solution for updating the application on the running EC2 instances.

ption B: cfn-init is a powerful tool for managing configuration on EC2 instances. By using cfn-init, the DevOps engineer can ensure that the new application version is installed regardless of the current state of the instances Option D: SSM documents provide a centralized and reusable way to manage configurations. By using Run Command, the engineer can trigger the application update on all instances directly from the template.

B and D: A: irrelevant B: cfn-init is perfectly correct for this purpose C: irrelevant. The question does not mention autoscaling group D: <Systems Manager Run Command > can help install packages, so it is correct E: < Systems Manager State Manager> is used to maintain, not to update

Here's why these options are correct: Option B: cfn-init is a powerful tool for managing configuration on EC2 instances. By using cfn-init, the DevOps engineer can ensure that the new application version is installed regardless of the current state of the instances. cfn-hup helps keep cfn-init updated with the latest configuration changes.   Option D: SSM documents provide a centralized and reusable way to manage configurations. By using Run Command, the engineer can trigger the application update on all instances directly from the template. This approach allows for easier management and updates in the future.

cfn-hup to chek for updates in cloudformation and ssm run command to run commands if required for application