Patch Management for Amazon EC2 Instances

Organize Instances into Patch teams

The second step within the method is to form a series of patch teams. This step is truly facultative, and you will not have sex in the least, however, patch teams do have their place. Let's suppose for a flash that you simply had many totally different workloads running on Windows Server 2016 instances. If you were to easily produce a patch baseline with rules referring to Windows Server 2016, then that baseline would apply to any or all of your Windows Server 2016 instances. If, however, you required to treat workloads otherwise from each other (from a patch management standpoint), then you may cluster workloads with similar fix needs into patch teams.

Creating a patch cluster may be a straightforward method, however it works a touch otherwise from what you would possibly expect. instead of employing a wizard among the Amazon EC2 dashboard to form a patch cluster, the entire issue is finished victimisation tagging. simply produce AN Amazon EC2 instance tag named Patch cluster and so assign it a price with the name that you simply would like to assign to the patch cluster. AWS Online Training 

Schedule fix

The next step in automating patch management for your Amazon EC2 instances is to form a fix schedule. you'll do that by making a maintenance window. A maintenance window primarily simply defines a fundamental measure once it's okay to perform maintenance (such as patch management) on the instance.

To set up a maintenance window, expand the Systems Manager Shared Resource section of the Amazon EC2 dashboard (it's within the console tree), and click on on the upkeep Windows instrumentality
there's nothing difficult concerning fitting a maintenance window. you'll have to assign a reputation and an outline to the upkeep window, then specify a maintenance schedule that meets your wants.

Once the upkeep window is made there area unit 2 additional stuff you ought to do. First, you'll have to register some targets. you'll do that by going back to the most Maintenance screen, choosing the upkeep window that you've got created, and choose the Targets tab at the lowest of the screen. From there, click Register New Targets.

Registering targets may be a straightforward method. simply assign a reputation and outline to the cluster of targets, then choose the Patch cluster tag, followed by the name of the patch cluster that you just need to register. once you are done, click the Register Targets button.

The second factor you have got to try and do is associate the mend action with the upkeep window. choose the Tasks tab at the lowest of the screen and click on Register New Tasks, followed by Run Automation Task. Enter a task name and outline, then select the AWS-PatchInstanceWithRollback possibility

Monitor fix

The final step in automating patch management is to watch the fixing method. watching permits you to form certain that the desired patches area unit being applied to your Amazon EC2 instances in line with the foundations laid out in your patch baseline. AWS Online Course 

You can read the patch compliance state for your instances by selecting the Patch Compliance choice from the console tree. once you do, you will be taken to the screen shown