Question: What is the best practice for maintaining Windows EC2 instances and applying updates?

  1. Turn on auto update in Windows Update on each EC2 that is launched, or create your own AMI with this feature enabled and launch all of your EC2 instances from this AMI.
  2. Create a maintenance schedule that an employee must fill out each week confirming a visual inspection of each instance was conducted and which patches were applied.
  3. Use AWS Systems Manager Patch Manager to find an patch instances that require updates during a set maintenance window.
  4. Install Window Server Update Services on your primary Active Directory controller.

Answer: The correct answer of the above question is Option C:Use AWS Systems Manager Patch Manager to find an patch instances that require updates during a set maintenance window.