A city web fleet must apply security baselines without SSH patching…

Question

A city web fleet must apply security baselines without SSH patching live instances. Which immutable infrastructure approach fits?

Accepted Answer

Bake golden AMIs and replace instances through Auto Scaling instance refresh instead of long-lived in-place SSH patching — Don’t redecorate the airplane while it’s flying—build a known-good AMI and roll new instances through Auto Scaling like swapping tires at the pit stop.

Answer

SSH into each production instance nightly and apply packages in place with no AMI updates

Answer

Disable Auto Scaling and keep one hand-managed EC2 instance patched by console clicks

Answer

Store OS packages only in S3 and hope running instances self-update without a launch template change

A city web fleet must apply security baselines without SSH patching live instances. Which immutable infrastructure approach fits?

Short Explanation

Full Explanation