Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 33 discussion

AWS-AmazonLinuxDefaultPatchBaseline: defines which patches should be applied and which should be avoided. AWS-RunPatchBaseline: provides commands to actually run the patching process on the instance.

A is correct: AWS system manager and AWS-RunPatchBaseline to utilize a default and custom repo B and C are irrelevant D: AWS-AmazonLinuxDefaultPatchBaseline: this baseline has "default" in its name, it is a predefined baseline and cannot work with a custom repo

Here are predefined documents that can not be modified (includes AWS-AmazonLinuxDefaultPatchBaseline) https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-predefined-and-custom-patch-baselines.html#patch-manager-baselines-custom And here is about the AWS-RunPatchBaseline https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-aws-runpatchbaseline.html

I was confused between A and D , i choose A instictinvily, D statement sounds like it only going to install default package for linux not from custom repo we add . But not sure any one can clarify

A, SSM allows inclusion of custom repositories.

A is it

A is correct

To automate the deployment of operating system and application patches using a default and custom repository in Amazon EC2 instances with Amazon Linux operating systems, you can use AWS Systems Manager. You can create a new patch baseline in Systems Manager that includes the custom repository, then run the AWS-RunPatchBaseline document using the run command to verify and install patches. This allows you to ensure continuous compliance for patches while also automating the patch deployment process.