Question

A SysOps administrator must produce a new Amazon Linux 2 AMI every month that includes the latest OS patches, a hardened CIS baseline, and a preinstalled monitoring agent. The AMI must be tested automatically before it is distributed to three other accounts, and the entire process must run on a schedule with minimal custom scripting to maintain. Which AWS service should the administrator use to meet these requirements?

Accepted Answer

EC2 Image Builder with an image pipeline that applies build components, runs test components, and distributes the AMI to the other accounts on a schedule

Answer

A CloudFormation stack set that launches an EC2 instance, runs UserData to patch and configure it, and calls CreateImage in each account

Answer

AWS Systems Manager Run Command triggered by an EventBridge schedule to patch a running instance and manually create an AMI afterward

Answer

AWS Backup with a scheduled plan that creates AMI backups of a golden instance and copies them cross-account