A user has launched an EC2 instance from an instance store backed AMI. The infrastructure team wants to create an
AMI from the running instance. Which of the below mentioned credentials is not required while creating the AMI?
A.
AWS account ID
B.
X.509 certificate and private key
C.
AWS login ID to login to the console
D.
Access key and secret access key
Explanation:
When the user has launched an EC2 instance from an instance store backed AMI and the admin team wants to create
an AMI from it, the user needs to setup the AWS AMI or the API tools first. Once the tool is setup the user will need the
following credentials:
– AWS account ID;
– AWS access and secret access key;
– X.509 certificate with private key.
C
0
0
“X.509 certificate with private key.” for what purpose?
A. AWS account ID => for login as root account. Not recommended but it is one possible case
B. X.509 certificate and private key => Just for ssh, so it is useless in this case.
C. AWS login ID to login to the console => Use console to create AMI
D. Access key and secret access key => Use API/CLI to create AMI
So the answer should be B
0
0
Sory, I missed understanding.
From this http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-instance-store.html#bundle-ami-prerequisites.
Prerequisites
Before you can create an AMI, you must complete the following tasks:
Install the AMI tools. For more information, see Setting Up the AMI Tools.
Install the AWS CLI. For more information, see Getting Set Up with the AWS Command Line Interface.
Ensure that you have an Amazon S3 bucket for the bundle. To create an Amazon S3 bucket, open the Amazon S3 console and click Create Bucket. Alternatively, you can use the AWS CLI mb command.
Ensure that you have your AWS account ID. For more information, see AWS Account Identifiers in the AWS General Reference.
Ensure that you have your access key ID and secret access key. For more information, see Access Keys in the AWS General Reference.
Ensure that you have an X.509 certificate and corresponding private key.
If you need to create an X.509 certificate, see Managing Signing Certificates. The X.509 certificate and private key are used to encrypt and decrypt your AMI.
[China (Beijing)] Use the $EC2_AMITOOL_HOME/etc/ec2/amitools/cert-ec2-cn-north-1.pem certificate.
[AWS GovCloud (US)] Use the $EC2_AMITOOL_HOME/etc/ec2/amitools/cert-ec2-gov.pem certificate.
Connect to your instance and customize it. For example, you can install software and applications, copy data, delete temporary files, and modify the Linux configuration.
=> C is answer!
0
0
C
0
0