How to Automate Operating Systems patches and Security patches using AWS SSM? 

Thank you.

Thank you very much

Sure 👍Thank you for your support.

Thank you. We will work on it.

Yes, kindly update for new patch management Patch policy in AWS

@@praveenchaudhary1523 yes please

Sure we will do

Exactly

@@saivardhan8276 It's odd to me that they've made it hard to get to that page because IMO, it's very much needed.

can you please tell the path where we will find configure patching

@@FixitMys3lf where to get that link please specify

@@utkarshpatel7839 I've temporarily lost access my AWS account, but @27:20, see the Orange button that says "Patch Now" ? Click that and then on the next page you should see Basic Configuration. Under that, in small font and clickable, you should see "Configure patching"

Could you please mention the video time stamp and the error message you are getting? Could you please give more context if this is a general inquiry? Thank you.

Thank you for posting your query. This can be because of any one of the following reasons: Option 1 Verify SSM Agent Installation and Running Status: Option 2: Please verify the IAM role attached with the EC2 instance has proper privileges. Please validate if you have attached “AmazonSSMManagedEC2InstanceDefaultPolicy” with the Instance Role. You can also temporarily assign Admin Privileges to check if EC2 instance profile is the issue. Option 3: Ensure that your EC2 instances can connect to Systems Manager endpoints on port 443. Use either Telnet or Netcat commands to verify connectivity. You can also verify the Security Group outbound rules for the EC2 instance.

After performing the following steps if you are still facing the issue. Please let me know, I can help you debug further.

Thank you for posting your query. In my demo, I addressed multiple use cases using a minimal number of EC2 instances. I used a mixed approach to overcome the following limitations: * A managed node can only belong to one patch group. * A patch group can only be associated with one patch baseline for each operating system type. I hope this clarification helps. If you still have any confusion, please provide me with the timestamp of the video, and I will address your doubts.

Thanks for your answer and for providing such a detailed video. When trying to configure patching, the concept of patch group now seems to be replaced by resource group though. Although, overall the concepts remain the same and now can be manged via Org as well.

You are absolutely correct.

Thank you will cover in next session

@@CloudExpertSolution plz share when you create vdo on this, 👍 thanks