There are 100 Windows EC2 instances in an environment. The CloudWatch agent is installed on all instances with a baseline config that collects log files. Now 50 instances need to start collecting DHCP logs as well. What is the most operationally efficient way to implement this change?

The most operationally efficient method is to create a new CloudWatch agent configuration specifically for DHCP logs. You can then use AWS Systems Manager Run Command to apply this new configuration to the 50 target instances. The append-config option allows you to add the new DHCP log collection without overwriting the existing baseline configuration, ensuring both sets of logs are collected. This approach leverages automation and avoids manual intervention on individual instances. RDPing to each instance is manual, time-consuming, and not scalable. Running the CloudWatch agent configuration wizard interactively on each instance is also a manual process and inefficient for 50 instances. The wizard does not automatically capture DHCP logs at an "advanced level"; specific configurations are always required.