Question 220
Which AWS recommendation best addresses this requirement at a foundational level? A company runs its application on Amazon EC2 and asks AWS to patch the guest operating system every month.
Explanation
Correct Answer
Assign the guest OS patching process to the customer's instance operations team. The case involves: A company runs its application on Amazon EC2 and asks AWS to patch the guest operating system every month. The central AWS principle is that the customer is responsible for configuring and patching the guest operating system on EC2 instances. What matters is: Look for the boundary between cloud-host hardware and the virtual machine's installed operating system. Recommended direction: Assign the guest OS patching process to the customer's instance operations team. Expected indication of success: The team applies security updates inside the instance while AWS manages the underlying infrastructure. Caveat: AWS maintaining the EC2 host does not mean AWS administers the customer's guest OS.
Incorrect Answers
Managed services shift more infrastructure operations to AWS while leaving data protection and access choices with the customer. In the present case the governing issue is The customer is responsible for configuring and patching the, which this does not resolve.
Customers must determine and configure recovery protections appropriate to their data and chosen services. That observation may hold without resolving the relevant issue: Assign the guest OS patching process to the customer's.
Customers retain responsibility for their Lambda function code and application data handling. It does not verify the requested outcome; here the decisive check concerns Assign the guest OS patching process to the customer's.