An application will be deployed to EC2 instances in an Auto Scaling group and requires installing dependencies. Updates are released weekly and the build process must include a vulnerability scan when creating the AMI. Which approach provides the greatest operational efficiency while meeting these needs?
Choose an answer
Tap an option to check your answer.
Correct answer: Use EC2 Image Builder with a custom image recipe that installs the application, its dependencies, and runs vulnerability scanning..
Why this is the answer
EC2 Image Builder is the most efficient solution because it automates the creation, management, and deployment of secure, patched, and up-to-date server images. Its custom image recipes allow you to define the base image, install applications and dependencies, and integrate vulnerability scanning tools as part of the build process. This directly addresses the requirement for weekly updates and vulnerability scanning. Manually installing and creating AMIs is inefficient and error-prone. A Packer script could work but requires more manual setup and management compared to the fully managed Image Builder service. Triggering the CreateImage API only creates an image of an existing instance; it doesn't automate the installation, updates, or scanning process within the image itself.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed