How are configuration changes applied to a lightweight access point?

Lightweight Access Points (LAPs) are centrally managed by a Wireless LAN Controller (WLC). Configuration changes are pushed from the WLC to the LAPs using the Control and Provisioning of Wireless Access Points (CAPWAP) protocol, or its predecessor, Lightweight Access Point Protocol (LWAPP). This protocol encapsulates both control plane (configuration, management) and data plane (user traffic) communications between the WLC and the AP. SSH directly to the AP is not typically used for configuration changes on LAPs because they operate in a "lightweight" mode, relying on the WLC for most functions. EoIP tunnels are not the standard protocol for AP management. HTTPS directly to the AP's out-of-band address is also incorrect; LAPs are managed in-band via CAPWAP/LWAPP by the WLC.