Amazon Machine Images (AMIs)

Correct Answer: Create an Amazon Machine Image (AMI) with the required environment and use it to launch new instances

Creating an Amazon Machine Image (AMI) with the desired environment setup allows the team to launch multiple identical instances based on that AMI efficiently. This approach provides a scalable solution without the need for manual intervention.

Correct Answer: Separate AWS accounts for each department for AMI usage

Using separate AWS accounts for each department is a best practice in AWS for isolating resources, managing permissions, and enhancing security. This approach ensures that each department can access only the Amazon Machine Images (AMIs) relevant to their use case, as resources and permissions are confined within each account. Managing departments under AWS Organizations allows for centralized billing and governance while maintaining strict access controls. This method provides a clear separation of resources, reduces the risk of unauthorized access, and simplifies compliance and auditing processes.

Correct Answer: Regularly update the AMI with the latest software patches and security updates

To avoid security issues like outdated libraries, it is best practice to regularly update the Amazon Machine Image (AMI) with the latest software patches, security updates, and other system updates. This ensures that the instances created from these updated AMIs are protected from known vulnerabilities.