An existing data management application is running on a single Amazon EC2 instance and needs to be moved to a new AWS Region in another AWS account. How can a SysOps Administrator achieve this while maintaining the security of the application?
A.
Create an encrypted Amazon Machine Image (AMI) of the instance and make it public to allow the other account to search and launch an instance from it.
B.
Create an AMI of the instance, add permissions for the AMI to the other AWS account, and start a new instance in the new region by using that AMI.
C.
Create an AMI of the instance, copy the AMI to the new region, add permissions for the AMI to the other AWS account, and start new instance.
D.
Create an encrypted snapshot of the instance and make it public. Provide only permissions to decrypt to the other AWS account.
It should be C -
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sharingamis-explicit.html
AMIs are a regional resource. Therefore, sharing an AMI makes it available in that region. To make an AMI available in a different region, copy the AMI to the region and then share it. For more information, see Copying an AMI.
we cannot provide access to another account while copying AMI (it only give options to select region not account id) .. so correct answer is B. to add permission for different account
C
AWS does not copy launch permissions, user-defined tags, or Amazon S3 bucket permissions from the source AMI to the new AMI. After the copy operation is complete, you can apply launch permissions, user-defined tags, and Amazon S3 bucket permissions to the new AMI
C
AWS does not copy launch permissions, user-defined tags, or Amazon S3 bucket permissions from the source AMI to the new AMI. After the copy operation is complete, you can apply launch permissions, user-defined tags, and Amazon S3 bucket permissions to the new AMI
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
mukeshs
Highly Voted 1 year, 1 month agocoolboylqy
Highly Voted 1 year, 1 month agoasfsdfsdf
Most Recent 8 months, 3 weeks agokrish2
1 year agoHuy
1 year agoRicardoD
1 year agoabhishek_m_86
1 year agojackdryan
1 year agoMFDOOM
1 year agogilbertlelancelo
1 year agogispankaj
1 year agowaterzhong
1 year, 1 month agomvsnogueira
1 year, 1 month agobadrobot
1 year, 1 month agosaumenP
1 year, 1 month ago