AWS Summit ANZ 2021 - Automating patch management and compliance using AWS Systems Manager

AWS Systems Manager gives you visibility and control of your infrastructure on AWS, providing a unified user interface to view operational data from multiple AWS services and allowing you to automate operational tasks across your AWS resources. In this session, learn how you can use AWS Systems Manager to automate one of the most common operational challenges that emerge on the journey to the cloud: patch management and compliance. See first hand how to setup and configure an automated, multi-account and multi-region (MAMR) patching operation using Amazon CloudWatch Events, AWS Lambda, and AWS Systems Manager.
To see what’s coming up from Amazon Web Services in Australia and New Zealand, visit go.aws/3FTtDM6
Subscribe:
More AWS videos bit.ly/2O3zS75
More AWS events videos bit.ly/316g9t4
ABOUT AWS
Amazon Web Services (AWS) hosts events, both online and in-person, bringing the cloud computing community together to connect, collaborate, and learn from AWS experts.
AWS is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers-including the fastest-growing startups, largest enterprises, and leading government agencies-are using AWS to lower costs, become more agile, and innovate faster.
#AWS #AmazonWebServices #CloudComputing

[@sxcode]

perfect! thank you!

[@Joy-vo4ne]

hi, Mitch, This is exactly what I'm looking for. Thanks a lot for your contribution. That would be nice if you could create another video how to prep the environment, like the sg, roles, and lambda functions, cloudwatch event rule, etc which are required. if that is too much, any added info is very appreciated.

[@MitchBeaumont]

Hi @joy. Thanks for the feedback on the video. I'm glad you found it useful. I've attached a link to a blog post which covers a lot of what you're looking for in terms of environment setup: aws.amazon.com/blogs/mt/scheduling-centralized-multi-account-multi-region-patching-aws-systems-manager-automation/
I hope this helps. Please let me know if not.

[@williechew374]

Came here to learn but was not ready for the new years resolution reality check at the start.

[@akshit243]

Hi Mitch, Thanks for the great explanation.
I have a small query. In case of deployments managed by a pipeline on these instances, won't the System Manger workflow cause the version set to be out of sync (which is getting the updates during live from merge too) ?

How do we manage the update versions since the instances are getting updates from 2 sources (Patch Manager as well as pipeline deployment) ?

[@awssupport]

Hi Akshit. 🙂 This is an excellent question to post to our community of experts over on re:Post: go.aws/aws-repost. ✉️ If you'd like, you can learn more about how Patch Management works, here:go.aws/3J3wAMX. 👈 ^SA