You have a set of 100 EC2 Instances in an AWS account. You need to ensure that all of these instances are patched and kept to date. All of the instances are in a private subnet. How can you achieve this? Choose 2 answers from the options given below.

Answer options:

A.Ensure a NAT gateway is present to download the updates.
B.Use the Systems Manager to patch the instances.
C.Ensure the inbound port 22 is open for the EC2 security group.
D.Use the AWS Inspector to patch the updates.

Answer – A and B
Option C is incorrect because SSH port 22 is not required for the SSM Patch Manager to work with EC2 instances.
Option D is incorrect because the AWS inspector can only detect the patches.
One of the AWS Blogs mentions how patching of Linux servers can be accomplished. Below is the diagram representation of the architecture setup.
For more information on patching Linux workloads in AWS, please refer to the link:
https://aws.amazon.com/blogs/security/how-to-patch-linux-workloads-on-aws/