Question

A SysOps administrator manages a fleet of 200 EC2 instances that must always run a specific version of a monitoring agent with a standardized configuration file. Developers occasionally uninstall or modify the agent when troubleshooting, causing configuration drift. The administrator needs an automated, ongoing solution that continuously enforces the desired agent installation and configuration without manual intervention. Which AWS Systems Manager capability should be used?

Accepted Answer

Use Systems Manager State Manager with an association that applies the desired configuration on a defined schedule to all matching instances.

Answer

Use Systems Manager Run Command to execute the installation script once across all instances by targeting a resource group.

Answer

Use Systems Manager Patch Manager with a maintenance window to install the agent during the patching cycle.

Answer

Use Systems Manager Automation with a runbook triggered manually whenever drift is reported.