You were just hired by an IT company as an AWS solutions architect. Your company has several Windows EC2 instances for multiple projects. You found that these EC2 instances did not have a plan to install system patches. You start using Patch Manager in AWS Systems Manager to configure when and how the patches should be installed. When patching activity is being configured, which method is NOT a valid one for instances to be selected?

Answer options:

A.Specify one or more instance tag key/value pairs to identify the instances you want to patch.
B.Use one or more patch groups to identify the instances you want to patch. Patch groups require the use of the tag key “Patch Group”.
C.Manually select the required instances.
D.Select the required EC2 instances based on security group identities/names.

Correct Answer – D
AWS Systems Manager Patch Manager is a native AWS solution to automate patching. The below diagram explains how it works.
Step 2 is optional, and there are several methods for the instances to be chosen as the target.
Option A is incorrect because one or several tag key/value pairs can be used to select instances.
Option B is incorrect because a patch group is a tag with the key as “Patch Group”, which is also a supported method to organize patching activities.
Option C is incorrect because selecting instances manually is supported.
Option D is CORRECT because security group identities/names are not used to choose instances for patching activities in Patch Manager.