Question

A SysOps administrator uses AWS Systems Manager State Manager to run a configuration script across a fleet of 500 EC2 instances. The script briefly restarts a critical service, and the team wants to limit blast radius: no more than 25% of instances should be affected at once, and if more than 10 instances report the association as failed, the rollout must stop automatically. Which State Manager association setting should be configured to meet these requirements?

Accepted Answer

Configure rate control with a concurrency of 25% and an error threshold of 10 errors

Answer

Set a compliance severity of Critical on the association so failures halt execution

Answer

Attach a maintenance window with a 25% task concurrency and a 10-minute timeout

Answer

Enable automatic rollback in the association and set MaxSessions to 25%