Patching for your Amazon EC2 Instances 

Love when the tools are fully built out in AWS. Great explainer.

AmazonEC2RoleforSSM - This policy will soon be deprecated. Please use AmazonSSMManagedInstanceCore policy to enable AWS Systems Manager service core functionality on EC2 instances.

Everything Well explained in short video. Expecting more like these

Current AWS console allows simpler process without tags and groups. Just select instances and schedule the patch

Not a word about required reboots?

Is not neccesary the SSM agente in 2024 ?.

Easy and straight forward. Thank you.

SSM policy provided too much access, it's not secure!!!

Plz share patch rollback process from SSM

Scan report where we can see, after running scan

Amazing!

Only EC2 service is used or any other services like route 53, s3 etc can be used? If yes how can i create those in system manager?

If EC2 instances are not exposed to internet and want to redirect them to look into S3 buckets which are publicly exposed, how can we do it? Created and attached IAM policy to the role but didn't help.

Great Video

at 4:10, In approval rules does the patches gets installed also or only approved?

Does anyone else find AWS to be insanely complicated? Why can't we just run updates like we used to?

this role doesn't exist