Your team is developing an application for a government project. For continuous deployment, you have built a CloudFormation stack to deploy EC2 instances. A third party software is installed in the instances and its license requires that the software should be bound to dedicated virtual machines. Whenever the CloudFormation stack is redeployed, the software should be installed in the same physical hosts. Which method would you select to achieve this requirement?

Answer options:

A.In the CloudFormation template, configure an AWS::EC2::Host resource to allocate a fully dedicated physical server when launching EC2 instances for the application.
B.Allocate dedicated hosts for this application which allow you to reliably launch EC2 instances on the same physical servers. In the CloudFormation template, specify the allocated HostID and configure the tenancy type to be dedicated host.
C.In the CloudFormation template, configure the EC2 instances to be dedicated instances for the single customer by specifying the tenancy value to be dedicated.
D.Define a custom VPC and ensure that the instance tenancy attribute of the VPC is dedicated. Modify the CloudFormation template to launch EC2 instances from this VPC.

Correct Answer – B
In order to launch EC2 instances on the same physical machines, EC2 dedicated hosts should be used. Check the overview of dedicated hosts in https://aws.amazon.com/ec2/dedicated-hosts/.
Option A is incorrect: The AWS::EC2::Host resource creates a dedicated host. However you should not create a new dedicated host every time when launching EC2 instances.
Option B is CORRECT: Because you can specify the HostId and Tenancy properties in AWS::EC2::Instance for launching instances on dedicated hosts.
Option C is incorrect: Because the tenancy value should be host instead of dedicated. Dedicated instances may still share hardware with other instances from the same AWS account. Dedicated hosts should be used.
Option D is incorrect: With this configuration, instances launched into this custom VPC are dedicated instances by default. However, the instances of dedicated hosts should be launched in this scenario.