SSM Run command scan updates failed

Question

Scheduled SSM run command to find updates on all servers with AWS-RunPatchBaseline, Version:$DEFAULT and Operation: Scan but its filing, please suggest what I am missing here. Error Message: The find operation did not complete successfully. More information : HResult: -2145123271.
I am running a SSM scheduled run command to SCAN for updates of servers, the command is AWS-RunPatchBaseline, Version:$DEFAULT and Operation: Scan but it failed with error, please suggest what I am missing here. error message: Invoke-PatchBaselineOperation, Error Message: The find operation did not complete successfully. More information : HResult: -2145123271.
Tried to clean updates logs, updated registry edit to remove WUserver and WUserverupdate from HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
updated ssm and powershells tried many steps but it failed

Answer

It looks like this is happening on one instance based on your question so it is most likely a Windows operating system issue. Can you try to connect to the instance via RDP and check for updates manually in the Windows Update GUI either in Settings or Control Panel depending on the version of Windows? If that fails or results in any errors, SSM will not be able to check for updates either because it relies on Windows Update functionality within Windows to do this. If Windows Update is not working, open a support case with Microsoft or search online for troubleshooting steps. Alternatively, it may be faster and simpler to launch a new EC2 instance and migrate any applications and data to it compared to troubleshooting a potentially complex and time-consuming operating system problem.

SSM Run command scan updates failed

Relevant content