AmazonEC2RoleforSSM - This policy will soon be deprecated. Please use AmazonSSMManagedInstanceCore policy to enable AWS Systems Manager service core functionality on EC2 instances.
If EC2 instances are not exposed to internet and want to redirect them to look into S3 buckets which are publicly exposed, how can we do it? Created and attached IAM policy to the role but didn't help.
Patch manager adds more features such as patching many instances at the same time and ability to schedule patch operations to run during a maintenance window
![Deep Dive with Amazon EC2 Systems Manager [ENT401]](http://i.ytimg.com/vi/BmpxZsk9N48/mqdefault.jpg)
Love when the tools are fully built out in AWS. Great explainer.
AmazonEC2RoleforSSM - This policy will soon be deprecated. Please use AmazonSSMManagedInstanceCore policy to enable AWS Systems Manager service core functionality on EC2 instances.
Everything Well explained in short video. Expecting more like these
Current AWS console allows simpler process without tags and groups. Just select instances and schedule the patch
Not a word about required reboots?
Caleb Gosnell system manager reboot the server once the patches are deployed
Is not neccesary the SSM agente in 2024 ?.
Easy and straight forward. Thank you.
SSM policy provided too much access, it's not secure!!!
Plz share patch rollback process from SSM
Scan report where we can see, after running scan
Amazing!
Only EC2 service is used or any other services like route 53, s3 etc can be used? If yes how can i create those in system manager?
If EC2 instances are not exposed to internet and want to redirect them to look into S3 buckets which are publicly exposed, how can we do it? Created and attached IAM policy to the role but didn't help.
use a vpc endpoint
Great Video
at 4:10, In approval rules does the patches gets installed also or only approved?
Only approved patches that match the approval rules are installed.
Does anyone else find AWS to be insanely complicated? Why can't we just run updates like we used to?
you can run updates on the command line, or through an ansible playbook, or with this tool. there's multiple options.
Patch manager adds more features such as patching many instances at the same time and ability to schedule patch operations to run during a maintenance window
this role doesn't exist