Apply monthly patches to EC2 instances with the same tag.
Manage approval rules and the execution window centrally.
Which feature set is most appropriate?
Use Systems Manager Patch Manager with a patch baseline and a Maintenance Window.
Detailed explanation
Manual updates increase omissions and audit effort as the fleet grows.
Manual updates increase omissions and audit effort as the fleet grows.
The patch baseline and window define approved patches and when they are installed on target nodes.
The patch baseline and window define approved patches and when they are installed on target nodes.
S3 versioning preserves objects and does not install EC2 operating-system patches.
S3 versioning preserves objects and does not install EC2 operating-system patches.
DNS TTL is not an operating-system patch schedule.
DNS TTL is not an operating-system patch schedule.
Check official documentation
Compare the following points with the official documentation.
Systems Manager Patch Manager and Maintenance Windowsの公式説明を確認する。
What to confirm
パッチベースラインと実行スケジュールを説明できる。
Key points
- Patch Manager
- Maintenance Window
- Patch baseline
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Governed maintenance
Approval rules and an execution window reduce unexpected changes and support auditability.
Fleet consistency
Tag-based targeting lets one patch policy cover a managed group of instances.