AWS Certified SysOps Administrator – Associate — Question 43

A company’s SysOps administrator deploys four new Amazon EC2 instances by using the standard Amazon Linux 2 Amazon Machine Image (AMI). The company needs to be able to use AWS Systems Manager to manage the instances. The SysOps administrator notices that the instances do not appear in the Systems Manager console.

What must the SysOps administrator do to resolve this issue?

Answer options

• A. Connect to each instance by using SSH. Install Systems Manager Agent on each instance. Configure Systems Manager Agent to start automatically when the instances start up.
• B. Use AWS Certificate Manager (ACM) to create a TLS certificate. Import the certificate into each instance. Configure Systems Manager Agent to use the TLS certificate for secure communications.
• C. Connect to each instance by using SSH. Create an ssm-user account. Add the ssm-user account to the /etc/sudoers.d directory.
• D. Attach an IAM instance profile to the instances. Ensure that the instance profile contains the AmazonSSMManagedInstanceCore policy.

Correct answer: D

Explanation

The correct answer, D, is necessary because the instances need the appropriate IAM role to communicate with AWS Systems Manager. Without the AmazonSSMManagedInstanceCore policy in the instance profile, the instances are unable to register with Systems Manager. Options A, B, and C do not address the required permissions and do not establish a connection to Systems Manager.