AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
A CloudOps engineer must provide a reliable, code-defined process to produce a patched and hardened Amazon Linux 2 golden AMI every month. After successful compliance tests, the image must automatically be copied to us-east-1 and eu-west-1 and shared with the staging and production AWS accounts. To control storage costs, only the two most recent image versions should be kept in each Region. Which solution meets these requirements with the least operational effort?
Rely on separate launch templates and Auto Scaling groups in every account and Region, enable Instance Refresh so patched instances replace themselves monthly, and terminate old instances to save costs instead of managing AMIs.
Create a Packer template and invoke it monthly from an AWS CodeBuild project triggered by EventBridge; add custom scripts to copy the AMI to each Region, adjust launch permissions for the other accounts, and schedule a Lambda function to delete older images.
Define an EC2 Image Builder pipeline in AWS CloudFormation that uses build and test components, runs on a monthly schedule, includes a distribution configuration that copies the AMI to us-east-1 and eu-west-1 and shares it with the staging and production accounts, and sets a lifecycle policy to retain only the two latest AMIs.
Use AWS Systems Manager Patch Manager to patch a long-running EC2 instance each month, then run an Automation workflow to create an AMI, copy it manually to the other Regions, share it through the console, and periodically delete outdated images by hand.
An EC2 Image Builder pipeline can be defined entirely in infrastructure-as-code tools such as CloudFormation. The pipeline's build and test components handle OS patching and compliance validation, while the built-in distribution configuration automatically copies the AMI to specified Regions and shares it with other accounts. Image Builder's lifecycle settings can retain a specified number of versions and delete older AMIs, eliminating custom scripts or manual cleanup. The other options rely on additional services, manual steps, or custom maintenance code, resulting in higher operational overhead.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an EC2 Image Builder pipeline?
Open an interactive chat with Bash
How does a lifecycle policy in Image Builder help manage AMI versions?
Open an interactive chat with Bash
What is the advantage of using CloudFormation with EC2 Image Builder?
Open an interactive chat with Bash
What is EC2 Image Builder and how does it simplify AMI management?
Open an interactive chat with Bash
What is the role of a distribution configuration in EC2 Image Builder?
Open an interactive chat with Bash
How does Image Builder's lifecycle policy help control AMI storage costs?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Deployment, Provisioning, and Automation
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .