You are trying to use the Systems Manager to patch a set of EC2 systems. Some of the systems are not getting covered in the patching process. Which of the following can be used to troubleshoot the issue? Choose 3 answers from the options given below.

Answer options:

A.Check to see if the right role has been assigned to the EC2 Instances.
B.Check to see if the IAM user has the right permissions for EC2.
C.Ensure that agent is running on the Instances.
D.Check the Instance status by using the Health API.

Answer – A, C and D
For ensuring that the instances are configured properly, you need to ensure the following.
1)You installed the latest version of the SSM Agent on your instance.
2)Your instance is configured with an AWS Identity and Access Management (IAM) role that enables the instance to communicate with the Systems Manager API.
3)You can use the Amazon EC2 Health API to quickly determine the following information about Amazon EC2 instances The status of one or more instances.
· The last time the instance sent a heartbeat value
· The version of the SSM Agent
· The operating system
· The version of the EC2Config service (Windows)
· The status of the EC2Config service (Windows)
Option B is invalid because IAM users are not supposed to be directly granted permissions to EC2 Instances.
For more information on troubleshooting AWS SSM, please visit the following URL:
https://docs.aws.amazon.com/systems-manager/latest/userguide/troubleshooting-remote-commands.html