As an AWS consultant, you are helping a company to manage AWS resources. At the moment, the company spends a lot of manual effort on patching the EC2 instances weekly. The company asks you to configure auto patching for its EC2 instances using Patch Manager in AWS Systems Manager. In terms of the usage of Patch Manager, which of the following statements are true? (Select TWO.)

Answer options:

A.Patch Manager only works for the Linux operating system.
B.You can customize a patch baseline used by your EC2 instances.
C.You can perform an on-demand patching operation even if it is not within a maintenance window.
D.You can use Patch Manager to patch Lambda functions.
E.The “Security” type of patches are always applied by Patch Manager which users cannot bypass.

Correct Answers: B and C
Option A is incorrect because several types of operating systems are supported, including Amazon Linux, CentOS, Debian Server, macOS, Ubuntu Server, Windows Server, etc.
Option B is CORRECT because users can create their own patch baselines with custom patch settings.
Option C is CORRECT because, in Patch Manager, customers can perform on-demand patching without the need to create a schedule.
Option D is incorrect because Lambda functions are serverless and not in the scope of Patch Manager.
Option E is incorrect because users can choose the type of patches to be applied with a custom patch baseline such as Security or Enhancement.
Reference:
https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-patch.html