Question

A SysOps administrator needs to run a one-time shell script to clear a stuck application cache across 60 running Linux EC2 instances tagged Environment=Production. The instances already have the SSM Agent installed and an instance profile granting the AmazonSSMManagedInstanceCore policy. The administrator must execute the script simultaneously without opening SSH, and wants execution output captured for auditing. What is the MOST appropriate approach?

Accepted Answer

Use AWS Systems Manager Run Command with the AWS-RunShellScript document, targeting instances by the Environment=Production tag, and configure an S3 bucket for command output.

Answer

Create a Systems Manager State Manager association that runs the AWS-RunShellScript document on a recurring schedule against the tagged instances.

Answer

Build a CloudFormation stack that includes an EC2 user data script to clear the cache and update the stack to apply it to all instances.

Answer

Store the script in Parameter Store and use a Systems Manager Automation runbook to reboot each instance so the script runs at boot.