A company uses Amazon EC2 as its primary compute platform. A DevOps team wants to audit the company's EC2 instances to check whether any prohibited applications have been installed on the EC2 instances.
Which solution will meet these requirements with the MOST operational efficiency?
The most operationally efficient solution for auditing EC2 instances for prohibited applications should seamlessly integrate monitoring and configuration management. AWS Systems Manager Inventory provides a managed service to collect metadata about the applications installed on EC2 instances. AWS Config, when used in conjunction with Systems Manager Inventory, can continuously monitor and evaluate the configuration of AWS resources. By creating AWS Config rules that monitor changes from Systems Manager Inventory, the system can automatically detect and report on prohibited applications, ensuring operational efficiency without needing additional lambda functions or manual intervention.
---> B
B https://aws.amazon.com/blogs/mt/preventing-blacklisted-applications-with-aws-systems-manager-and-aws-config/