Jump-host configuration across accounts has drifted—different SSH settings and agent versions. Which AWS capability best enforces desired state continuously?
Select an answer to reveal the explanation.
Short Explanation
Drift loves jump hosts—State Manager associations are the seatbelt that keeps SSH settings and agents where you left them. One-time launch configs and “trust the wiki” don’t survive a year of emergencies.
Full Explanation
Systems Manager State Manager applies and reapplies desired configuration via associations, which is the AWS-recommended approach for configuration management automation on EC2 fleets including bastion/jump hosts. One-time bootstrap without reconciliation and SSH-only unmanaged change allow drift to accumulate across accounts.