How to automatically patch EC2 instances created from CloudFormation Stacks using SSM patch manager


We have EC2 instances created via CloudFormation. If we use SSM patch manager to automatically patch these instances, will that cause drifts to the CF stack?

asked a month ago135 views
1 Answer
Accepted Answer


CloudFormation drift checks differences in AWS settings (instance type, EBS type, etc.), so drift does not occur with information inside the EC2 OS.

CloudFormation detects drift on those AWS resources that support drift detection. Resources that don't support drift detection are assigned a drift status of NOT_CHECKED. For a list of AWS resources that support drift detection, see Resources that support import and drift detection operations.

profile picture
answered a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions