Back to Basics: Automating Patching of EC2 Instances Using Systems Manager

Enterprise customers often run large number of EC2 instances. Patching these large quantities of instances manually takes a long time and there is a scope for mistakes which is why companies prefer automating the process. Additionally, some of these applications are critical applications in which the applications cannot be patched randomly and needs to be completed within certain time constraints. This is where customers can utilize features of Systems Manager like SSM Patch Manager, Maintenance windows and Patch Group to automate patching of their EC2 instances and minimize downtime. Join Zaiba as she dissects an end-to-end architecture that leverages SSM Patch Manager to automate patching your EC2 instances.
Additional Resources:
AWS Systems Manager: aws.amazon.com/systems-manager/
AWS Systems Manager documentation: docs.aws.amazon.com/systems-m...
Systems Manager Patch Manager: docs.aws.amazon.com/systems-m...
Patching your Windows EC2 instances using AWS Systems Manager Patch Manager: aws.amazon.com/blogs/mt/patch...
Server Fleet Management at Scale: aws.amazon.com/solutions/impl...
Check out more resources for architecting in the #AWS cloud:
amzn.to/3qXIsWN
#AWS #AmazonWebServices #CloudComputing #BacktoBasics #SystemsManager

[@keyurigargav6672]

That was useful ! Thanks !

[@manishrspeaks]

Does Patch Manager offer any roll back option? If incase we need to revert applied updates.

[@FixitMys3lf]

Is there an update to this video? Since AWS has revamped the UI and hidden the "Configure Patching" (mentioned @1:35 in the video), seems like they should publish something that actually matches the current UI?

[@awssupport]

Hi there! That's a great question, & we appreciate the feedback. I've forwarded this over to our TH-cam team for consideration. 🤝 ^RM

[@Saady2s]

How to control the server services to ensure while the services are running, they must be stopped before ssm apply the patches?

[@awssupport]

For more information on how AWS Patch Manager works with EC2, you may find this blog helpful: go.aws/3ZwsJPn. Here's also further context on how patches are installed: go.aws/3SYn6qV; just in case you still have questions, there are more ways to get help, as listed here: go.aws/get-help. ^AD

[@manikroy7768]

Mam, how to ensure target patch will work with the application? How to revert in case?

[@pataisangbutsarakum7808]

In this case - EC2, I would assume that we as the users have tested the compatibility between patches and your application before doing it in bulk or before rolling patch into Prod (strategise it) . For the revert part, AWS-PatchInstanceWithRollback should the trick .