I am working on to Automate Windows EC2 servers Patching(Scan and install) but unfortunately Patching was failed with the error as given in description. Attached Screen capture as well. Kindly suggest
i have followed this link for the automated patching https://medium.com/globant/patching-of-windows-and-linux-ec2-instances-using-aws-ssm-b409784a5bd7, and attached the screenshot here.
- 新しい順
- 投票が多い順
- コメントが多い順
Hello Manoj!
From the information provided, it appears that there might be a lacking/incorrect Trust Relationship in the IAM Role you created that is preventing it from being able to assume the role. Without more information, it's hard to determine what Trust Relationship you need. If it's a role for SSM to do actions on your behalf, then the Trust relationship must list SSM as being able to assume the role. I would recommend you take a look at the following AWS blog on how to set up patching for Windows instances using SSM: https://aws.amazon.com/blogs/mt/patching-your-windows-ec2-instances-using-aws-systems-manager-patch-manager/ Also a good blog on Linux patching using SSM: https://aws.amazon.com/blogs/security/how-to-patch-linux-workloads-on-aws/
These blogs go into great detail to include the proper way of setting up the required IAM roles and appropriate Trust Relationships. I hope this helps!
