AWS DevOps Engineer Professional Practice Test

To manage Linux machine updates from alternate repositories via Systems Manager, what must be done?

1. Use the default Patch Baseline

2. Configure a custom Patch Baseline

3. Manually apply patches from the alternate repository

4. Create a new Systems Manager instance

The correct answer is: Configure a custom Patch Baseline

To manage Linux machine updates from alternate repositories using AWS Systems Manager, configuring a custom Patch Baseline is essential. A Patch Baseline specifies the set of patches that are approved for deployment to your systems. By setting a custom Patch Baseline, you can define sources for package updates that are not included in the default repositories, allowing your instances to pull updates from specified alternative repositories. Using a custom Patch Baseline provides flexibility to include patches that meet specific compliance or operational requirements not covered by the standard default. This is particularly important for environments that may utilize proprietary software or have restrictions on their ecosystem, such as unique configurations or third-party software dependencies. This approach ensures a consistent patch management process across your fleet of machines while adhering to organizational policies and compliance standards. It also allows you to automate the process of patching and reduce the risk of patches being missed during updates.