@@ -18,6 +18,7 @@ The SRA Patch Manager solution will automate enabling Systems Manager - Patch ma
18
18
19
19
** Key solution features:**
20
20
- Assumes a role in each member account to enable/disable the Patch Manager Solution.
21
+ - Creates 3 Maintenance Windows to Scan or Patch Windows or Linux Managed Instances
21
22
- Configures the [ Default Host Configuration] ( https://docs.aws.amazon.com/systems-manager/latest/userguide/quick-setup-default-host-management-configuration.html ) feature.
22
23
- Ability to disable Patch Manager within all accounts and regions via a parameter and CloudFormation update event.
23
24
@@ -29,7 +30,7 @@ The Patch Manager solution requires:
29
30
- SSM Agent 3.0.502 or later to be installed on the managed node
30
31
- Internet connectivity from the managed node to the source patch repositories
31
32
- Supported OS
32
- - A tag is applied to the Manage Instance. Key: InstanceOS Value: Linux or Windows
33
+ - A tag is applied to the Managed Instance. Key: InstanceOS Value: Linux or Windows
33
34
34
35
---
35
36
@@ -56,23 +57,31 @@ The Patch Manager solution requires:
56
57
57
58
##### Maintenance Windows Window
58
59
59
- One maintenance windows is created:
60
- - ` Update_SSMAgent ` updates SSM Agent
60
+ Three Maintenance Windows are created:
61
+ - ` Update_SSM ` updates SSM Agent on all Managed Instances
62
+ - ` Windows_Scan ` scans for missing patches on all Managed Instances Tagged as Windows
63
+ - ` Linux_Scan ` scans for missing patches on all Managed Instances Tagged as Linux
61
64
62
65
##### Maintenance Windows Tasks
63
66
64
- One task is created and registered with the window:
65
- - ` AWS-UpdateSSMAgent ` Runs an SSM Agent update on Linux and Windows
67
+ Three tasks are created and registered with each of the Maintenance Windows:
68
+ - ` Update SSMAgent On Managed Instances ` Runs an SSM Agent update on all Managed Instances
69
+ - ` Scan For Patches On Managed Windows Instances ` Runs a scan on all Managed Instances Tagged as Windows
70
+ - ` Scan For Patches On Managed Linux Instances ` Runs a scan on all Managed Instances Tagged as Linux
66
71
67
72
##### Maintenance Window Targets
68
73
69
- One target is created and registered with the window:
70
- - ` Update_SSMAgent ` which includes all instances with the tag InstanceOS: Windows or InstanceOS: Linux
74
+ Three target groups are created and registered with each of the Maintenance Windows:
75
+ - ` Targets To Update SSMAgent On Managed Instances ` which includes all instances with the tag InstanceOS: Windows or InstanceOS: Linux
76
+ - ` Targets To Scan For Windows Updates On Managed Instances ` which includes all instances with the tag InstanceOS: Windows
77
+ - ` Targets To Scan For Linux Updates On Managed Instances ` which includes all instances with the tag InstanceOS: Linux
71
78
72
79
#### 1.4 Command Documents<!-- omit in toc -->
73
80
74
81
These AWS Managed SSM Documents are used by the tasks:
75
- - AWS-UpdateSSMAgent
82
+ - ` AWS-UpdateSSMAgent `
83
+ - ` AWS-RunPatchBaseline `
84
+
76
85
77
86
78
87
## Implementation Instructions
0 commit comments