AWS Certified SysOps Administrator – Associate (legacy) — Question 534

A SysOps Administrator is attempting to use AWS Systems Manager Session Manager to initiate a SSH session with an Amazon EC2 instance running on a custom Linux Amazon Machine Image (AMI). The Administrator cannot find the target instance in the Session Manager console.
Which combination of actions will solve this issue? (Choose two.)

Answer options

• A. Add Systems Manager permissions to the instance profile.
• B. Configure the bucket used by Session Manager logs to allow write access.
• C. Install Systems Manager Agent on the instance.
• D. Modify the instance security group to allow inbound traffic on SSH port 22.
• E. Reboot the instance with a new SSH key pair named ssm-user.

Correct answer: B, D

Explanation

To resolve the issue and allow Session Manager to function properly for this setup, the S3 bucket used for storing Session Manager logs must be configured to allow write access. Additionally, since the administrator is attempting to establish an SSH session, the EC2 instance's security group must be modified to permit inbound traffic on SSH port 22.